The geoserver image currently assumes it runs as root: it writes to /root, writes a temp file into the script's working directory, and several config edits happen at runtime against image-owned files. This prevents running the image under a non-root user. But running as non-root is required in some production environments.
Work was proposed in this area by #59 , but that pull request seems stalled and has a larger scope.
I therefore propose to first make the geoserver image non-root-capable, as an isolated step providing immediate added value for production environments. In the long run, this step can significantly reduce the complexity of a large scoped pull request such as #59.
A pull request implementing this issue follows.
The geoserver image currently assumes it runs as root: it writes to /root, writes a temp file into the script's working directory, and several config edits happen at runtime against image-owned files. This prevents running the image under a non-root user. But running as non-root is required in some production environments.
Work was proposed in this area by #59 , but that pull request seems stalled and has a larger scope.
I therefore propose to first make the geoserver image non-root-capable, as an isolated step providing immediate added value for production environments. In the long run, this step can significantly reduce the complexity of a large scoped pull request such as #59.
A pull request implementing this issue follows.