avi-sanwal opened a new pull request, #242: URL: https://github.com/apache/flink-docker/pull/242
This change removes the gosu dependency for privilege dropping in favor of using the Dockerfile USER directive, which is the modern, recommended approach for running containers as non-root users. Changes: - Removed gosu installation and verification from Dockerfile template - Added USER flink directive before COPY in Dockerfile template - Replaced drop_privs_cmd() with check_priv_user() that warns if running as root instead of using gosu to drop privileges - Removed all $(drop_privs_cmd) calls from exec commands in entrypoint This aligns with security best practices by ensuring containers run as non-root from the start rather than starting as root and dropping privileges at runtime. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
