wazuh manager can be run as non-root? #740
-
|
In this repo for build-docker-images, both Indexer and Dashboard containers are set to run as non-root user, while the manager is set to run as root. Wanted to know if manager as well can be run as non-root user at all. In case not feasible, wanted to understand the dependencies here. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
|
Hi @shashipanduga, By adding a non-root user to the |
Beta Was this translation helpful? Give feedback.
-
|
Hi @jctello , In the above example you shared, it seems to work to run Docker Daemon itself as non-user, but its not applicable in my case as I understand. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @shashipanduga , |
Beta Was this translation helpful? Give feedback.
Hi @shashipanduga,
Yes, you can run all containers as a non-root user.
As you mention, this is done with the Dockerfile of the Indexer and Dashboards but not for the Wazuh manager.
By adding a non-root user to the
dockergroup as mentioned on the note at the end of the Docker engine installation instructions you may run all containers as a less privileged user.