Run Durable Functions with DurableTaskListener on AKS as non-root user?

[paravatha]

Hey all,
anyone able to run Durable Functions with DurableTaskListener on AKS as a non-root user?

In this 3 year old issue someone mentioned that the container needs to run as root user. #2126 (comment)

Wondering if its still the case?

[paravatha]

Found a workaround, documented it here #2126 (comment)

Here is the sample dockerfile

ARG JAVA_VERSION=21
FROM mcr.microsoft.com/azure-functions/java:4-java$JAVA_VERSION-appservice

ENV FUNCTION_APP_DIRECTORY=/home/site/wwwroot
# Use a port other than 80 to avoid conflicts with the Azure Functions runtime
# Reference https://devblogs.microsoft.com/dotnet/securing-containers-with-rootless/#switching-to-port-8080
ENV PORT=8080
ENV ASPNETCORE_URLS=http://*:${PORT}

# Set environment variables for the Azure Functions runtime
ENV AzureWebJobsScriptRoot=${FUNCTION_APP_DIRECTORY} \
    AzureFunctionsJobHost__Logging__Console__IsEnabled=true

# Set app user permissions for the function app directory
RUN chmod -R 755 ${FUNCTION_APP_DIRECTORY} \
    && chown -R app:app ${FUNCTION_APP_DIRECTORY}

# Copy the built function app from the installer environment to the runtime image
COPY --from=installer-env ${FUNCTION_APP_DIRECTORY} ${FUNCTION_APP_DIRECTORY}

# Switch to the existing non-root user in the appservice image
USER app

# Use a port other than 80 to avoid conflicts with the Azure Functions runtime
# Reference https://devblogs.microsoft.com/dotnet/securing-containers-with-rootless/#switching-to-port-8080
EXPOSE ${PORT}