From aba938f308f14daa4c6fb28befa7a7af89a65efe Mon Sep 17 00:00:00 2001 From: Dom Gibson Date: Thu, 11 Mar 2021 12:12:44 +0000 Subject: [PATCH] SCMOD-12755: Allow base images to run as non-root users --- README.md | 12 ------------ release-notes-2.3.0.md | 5 ++--- 2 files changed, 2 insertions(+), 15 deletions(-) diff --git a/README.md b/README.md index b497b83..3c32609 100644 --- a/README.md +++ b/README.md @@ -11,18 +11,6 @@ This project builds on the [openSUSE Java8 image](https://github.com/CAFapi/open ### DejaVu Fonts [DejaVu Fonts](https://dejavu-fonts.github.io/) is pre-installed in the container. The DejaVu fonts are a font family based on the Bitstream Vera Fonts. Its purpose is to provide a wider range of characters while maintaining the original look and feel through the process of collaborative development. -### Gosu -[Gosu](https://github.com/tianon/gosu/) is pre-installed in the container. Gosu allows derived images to run commands as a specified user, rather than as the default user. - -To use gosu, set the `RUNAS_USER` environment variable in the derived container's Dockerfile. Subsequent commands will then be run as the specified user: - -``` -ENV RUNAS_USER=my-user -CMD ["whoami"] # Outputs my-user -``` - -Note: the user specified by the `RUNAS_USER` is expected to already exist, and the `CMD` will fail if this is not the case. - ### Startup Scripts Any executable scripts added to the `/startup/startup.d/` directory will be automatically run each time the container is started (assuming the image entrypoint is not overwritten). diff --git a/release-notes-2.3.0.md b/release-notes-2.3.0.md index fc1cf8a..67eb4e2 100644 --- a/release-notes-2.3.0.md +++ b/release-notes-2.3.0.md @@ -4,9 +4,8 @@ ${version-number} #### New Features -- SCMOD-11949: The [gosu](https://github.com/tianon/gosu/) tool is now available in the base image. - This tool allows derived images to run commands as a specified user, rather than as the default user. - See the [README.md](https://github.com/CAFapi/opensuse-python3-jre8-image/blob/master/README.md) for more details. +- SCMOD-12755: The pre-installed startup scripts no longer requires root permissions to run. This allows containers + built on this image to run as arbitrary users. #### Known Issues - None