Skip to content

document deploy rootless using docker compose#1956

Open
devbgv wants to merge 1 commit into
mainfrom
bgv/rootless-nim-changes
Open

document deploy rootless using docker compose#1956
devbgv wants to merge 1 commit into
mainfrom
bgv/rootless-nim-changes

Conversation

@devbgv
Copy link
Copy Markdown

@devbgv devbgv commented May 14, 2026

Proposed changes
Adds a new how-to guide for deploying F5 NGINX Instance Manager (NIM) in a rootless Docker Compose environment, where all container processes run as the nms non-root user.

What changed and why:
The existing Docker deployment section covers the standard image-based Docker Compose flow. This PR adds a companion guide for teams with security hardening requirements—such as CIS benchmarks or internal least-privilege policies—that prevent running containers as root. The guide also documents the runtime configuration injection pattern used by this deployment, which allows NIM settings to be changed via environment variables and a stack restart, without rebuilding the Docker image. This is distinct from the standard deployment and warrants its own topic.

How the changes were made:

  • The new file deploy-nim-rootless-docker-compose.md follows the established conventions of the existing Docker deployment topics: f5-content-type: how-to, f5-product: NIMNGR, toc: true, H2/H3 heading hierarchy, --- section separators, fenced code blocks with language identifiers, and {{< call-out >}} shortcodes for notes.
  • weight: 150 places the page between the existing standard deployment guide (100) and the data plane guide (200) in the left-hand navigation.
  • A {{< ref >}} cross-link to the standard Docker Compose guide is included in the "See also" section.
  • _index.md description and f5-summary are updated to surface the new rootless option on the section landing page.
    Out of scope / follow-up considerations:
  • This guide references startNIM.sh helper functions (set_nms_conf, set_nms_sm). If a reference topic for those functions is added in future, a cross-link should be added here.
  • The f5-docs field is set to a placeholder (DOCS-NIM-ROOTLESS) and should be updated with the canonical JIRA ticket before merge.

Checklist
Before sharing this pull request, I completed the following checklist:

@devbgv devbgv requested a review from a team as a code owner May 14, 2026 12:32
@github-actions github-actions Bot added documentation Improvements or additions to documentation product/nim Issues related to NGINX Instance Manager labels May 14, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 14, 2026

🎉 Thank you for your contribution! It appears you have not yet signed the F5 Contributor License Agreement (CLA), which is required for your changes to be incorporated into an F5 Open Source Software (OSS) project. Please kindly read the F5 CLA and reply on a new comment with the following text to agree:


I have hereby read the F5 CLA and agree to its terms


Vamshi Krishna BGV seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.

@devbgv
Copy link
Copy Markdown
Author

devbgv commented May 14, 2026

I have hereby read the F5 CLA and agree to its terms

@devbgv devbgv force-pushed the bgv/rootless-nim-changes branch from 5d74f1f to d8a39ec Compare May 14, 2026 12:33
@github-actions
Copy link
Copy Markdown

Deploy Preview will be available once build job completes!

Name Link
😎 Deploy Preview https://frontdoor-test-docs.nginx.com/previews/docs/1956/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation product/nim Issues related to NGINX Instance Manager

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant