alexryabtsev / docker-workshop Goto Github PK

I've got error when I run test-curl containers.

curl: (77) Problem with the SSL CA cert (path? access rights?)

I've solved this problem adding the following to Dockerfile

RUN apt-get install --no-install-recommends --no-install-suggests -y ca-certificates

Hope to be helpful.

Hi,

As I discuss here (https://pythonspeed.com/articles/root-capabilities-docker-security/), running Docker containers as root is a problem, opening you up to a bunch of security attacks (e.g. escalation to root on host in February 2019 CVE, which was preventable by starting as non-root user).

Could you update your best practices to note this, and your default Dockerfile to switch to a non-root user? Since your article seems pretty popular, people are no doubt using it as basis for what they build, which is fine—but it would be good if they started with something that was secure by default.