Skip to content

Run Geti Tune container as non-root user #5000

@leoll2

Description

@leoll2

The Geti Tune Docker image uses root as default user, which is not ideal from a security perspective.

A non-root user can be added to the Dockerfile as follows:

RUN useradd -m -u 10001 non-root && chown -R non-root:non-root /application
USER non-root

Try to add the non-root user and verify that everything still works correctly. Some adjustments may be necessary, e.g. change nginx to run on a non-privileged port. Privileges may be also needed to attach devices (e.g. cameras).

Metadata

Metadata

Assignees

Labels

Geti Tune BackendIssues related to Geti Tune Studio backend

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions