Grouper Users - Open Discussion List

[Darren Boss <>]

Even if not running under Openshift and just upstream Kubernetes, please retool the Docker images to not run as root (this applies to the other TAP images as well).

Containers are not vms and unless you are running with uid translation/mapping in place, the grouper process would be running at root on the system as well. From what I've read, running within a user namespace and remapping uids can impart a performance penalty.

On Wed, Apr 22, 2020 at 3:22 AM Oliver Trieu <> wrote:

Dear Grouper Team,


I think its great that Grouper is now running on containers.

This is definitely a step in the right direction.

I was wondering if you could prepare your Container Image to run on the
Openshift Platform.

The issue here is that the current Image wants to run as the root user.

It would be great if you could run it as an unpriviledged user.


Is it possible to obtaiin the Dockerfiles you used to create the images?


Kind Regards


Oliver

--

Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal