Originally created by @xhalo32 on GitHub (Apr 16, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/968
<!--
Please fill out the following template to make solving your problem easier and faster for us.
This is only a guideline. If you think that parts are unneccessary for your issue, feel free to remove them.
Remember to hide/obfuscate personal and confidential information,
such as names, global IP/DNS adresses and especially passwords, if neccessary.
-->
### Subject of the issue
Shouldn't use the root user to run the services inside the containers.
https://medium.com/@mccode/processes-in-containers-should-not-run-as-root-2feae3f0df3b
<!-- gh-comment-id:642459718 -->
@jjlin commented on GitHub (Jun 11, 2020):
As noted in https://github.com/dani-garcia/bitwarden_rs/pull/1014#issuecomment-637965744, this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root:
https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user
Should this remove the listing here, since its basically the same, and better suited in the Hardening Guide, IMO.
<!-- gh-comment-id:642835270 -->
@Stampede10343 commented on GitHub (Jun 11, 2020):
> As noted in [#1014 (comment)](https://github.com/dani-garcia/bitwarden_rs/pull/1014#issuecomment-637965744), this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root:
>
> https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user
Should this remove the [listing here](https://github.com/dani-garcia/bitwarden_rs/wiki/Running-the-server-with-non-root-user), since its basically the same, and better suited in the Hardening Guide, IMO.
@Stampede10343 I didn't notice that page, but I think it has a few additional things that would be good to mention. I'll merge it into the hardening guide page tonight. Thanks for calling attention to that.
<!-- gh-comment-id:642839474 -->
@jjlin commented on GitHub (Jun 11, 2020):
@Stampede10343 I didn't notice that page, but I think it has a few additional things that would be good to mention. I'll merge it into the hardening guide page tonight. Thanks for calling attention to that.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @xhalo32 on GitHub (Apr 16, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/968
Subject of the issue
Shouldn't use the root user to run the services inside the containers.
https://medium.com/@mccode/processes-in-containers-should-not-run-as-root-2feae3f0df3b
@jjlin commented on GitHub (Jun 11, 2020):
As noted in https://github.com/dani-garcia/bitwarden_rs/pull/1014#issuecomment-637965744, this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root:
https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user
@Stampede10343 commented on GitHub (Jun 11, 2020):
Should this remove the listing here, since its basically the same, and better suited in the Hardening Guide, IMO.
@jjlin commented on GitHub (Jun 11, 2020):
@Stampede10343 I didn't notice that page, but I think it has a few additional things that would be good to mention. I'll merge it into the hardening guide page tonight. Thanks for calling attention to that.
@jjlin commented on GitHub (Jun 11, 2020):
It's updated now.
@BlackDex commented on GitHub (Oct 8, 2020):
Thx for the updated wiki, closing this issue.