Non-Root Container

[breygonsnow]

It is now becoming more common to create non-root containers to reduce the ability to escape the container with a privileged user. Additionally, non-root is a common Pod Security Policy (admission controller policy) that is blocked in orchestration tools such as Kubernetes.

It appears that this container uses root (I expect because of the ports for Apache but maybe more).

Would it be possible to run this container as non-root or offer a non-root option?

Much appreciated.

[mstenta]

We'd love help with this @breygonsnow if you want to give it some thought and propose changes in a pull request! Or just start thinking through the considerations here and then we can work together on a PR.