Resolve "[Docker] Do not run as root" (!544) · Merge requests · AlekSIS® / Official / AlekSIS-Core

Merged Nik | Klampfradler requested to merge 409-docker-do-not-run-as-root into master 4 years ago

Mar 23, 2021
- Merge branch 'master' into 409-docker-do-not-run-as-root · 7e458d32
  Nik | Klampfradler authored 4 years ago
  
  Verified
  
  7e458d32
- Use `DefaultStorageBackend` from upstream django-maintenance-mode · 35ea4686
  Nik | Klampfradler authored 4 years ago
  
  Verified
  
  35ea4686
- Merge branch 'feature/poetry-update' into 409-docker-do-not-run-as-root · d12a111d
  Nik | Klampfradler authored 4 years ago
  
  Verified
  
  d12a111d
Mar 22, 2021
- [Docker] Use numeric user ID in USER to not confuse K8s · fd9c6006
  Nik | Klampfradler authored 4 years ago
  
  Verified
  
  fd9c6006
- Use media storage for maintenance mode state file · 214f5bb4
  Nik | Klampfradler authored 4 years ago
  
  Previously, we relied on either explicit configuration to place the file in a writable location, or the webserver being able to write to the source tree. With a (probably even replicated) setup where nothing runs as root, and al lstorages are thus read-only except for the media storage, we need to put the maintenance file there.
  Verified
  
  214f5bb4
- [Docker] Do not declare static root as volume · 86a9b0e8
  Nik | Klampfradler authored 4 years ago
  
  Advances #403
  Verified
  
  86a9b0e8
- [Docker] Honour storage locations and declare volumes correctly · 0d5c0fbd
  Nik | Klampfradler authored 4 years ago
  
  Advances #403
  Verified
  
  0d5c0fbd
- Run `collectstatic` at build time · bdcb1036
  Nik | Klampfradler authored 4 years ago
  
  Advances #403
  Verified
  
  bdcb1036
- [Docker] Drop privileges to www-data after container build · ce183405
  Nik | Klampfradler authored 4 years ago
  
  Verified
  
  ce183405

Resolve "[Docker] Do not run as root"

Merge request reports

Activity