Skip to content
This repository has been archived by the owner on Jan 11, 2023. It is now read-only.

Fix CoreDNS user #283

Open
b-m-f opened this issue Sep 12, 2022 · 0 comments
Open

Fix CoreDNS user #283

b-m-f opened this issue Sep 12, 2022 · 0 comments

Comments

@b-m-f
Copy link
Owner

b-m-f commented Sep 12, 2022

Currently coreDNS is running as root inside the container so that it can bind to port 53.

The root user can do this because it can get the capability CAP_NET_BIND_SERVICE.

Maybe there is a way to give this capability to the coredns user inside the container.

Additional steps

If the user has the correct capability the coredns binary must be run as the coredns user by changing

coredns -conf /etc/coredns/Corefile  

to

s6-setuidgid coredns coredns -conf /etc/coredns/Corefile

in /Build-Automation/WirtBot/service-files/dns

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant