How to switch to normal user in docker
In Docker, in order to achieve more secure operations, non-root users are usually used to run containers, because the root user has full permissions to perform any operations inside the container. In this article, we will explain how to switch to a non-root user.
1. Create a non-root user
Before using Docker, we need to create a non-root user. To do this, we can create it in the following way:
- Execute the following command to create a user named "dockeruser":
sudo useradd -ms /bin/bash dockeruser
- This is the user Set password:
sudo passwd dockeruser
- Add this user to the docker user group:
sudo usermod -aG docker dockeruser
2. Switch to a normal user in the container
- Use the following command to start the container:
docker run -it --name mycontainer ubuntu:latest /bin/bash
- Inside the container, switch to an ordinary user:
su dockeruser
3. Use Dockerfile to switch to an ordinary user
Using Dockerfile can more easily automate the container building process. The following is an example of using a Dockerfile to implement non-root user switching:
- Create a file named "Dockerfile" and add the following content:
FROM ubuntu:latest RUN groupadd -g 1000 dockeruser && \ useradd -r -u 1000 -g dockeruser dockeruser USER dockeruser
- Build the image and start the container:
docker build -t myimage . docker run -it --name mycontainer myimage /bin/bash
Here we create a user named "dockeruser" through the Dockerfile and set it as the default user when the container starts.
Summary
Using non-root users to run containers in Docker can improve security and protect the host system and sensitive data. In this article, we covered two methods of switching to a non-root user: manually switching in the container and automatically using a Dockerfile.
With the development of container technology, we believe that more security and convenience features will be introduced into Docker. If you also want to learn more about Docker containers, please follow our blog.
The above is the detailed content of How to switch to normal user in docker. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics



Docker is a must-have skill for DevOps engineers. 1.Docker is an open source containerized platform that achieves isolation and portability by packaging applications and their dependencies into containers. 2. Docker works with namespaces, control groups and federated file systems. 3. Basic usage includes creating, running and managing containers. 4. Advanced usage includes using DockerCompose to manage multi-container applications. 5. Common errors include container failure, port mapping problems, and data persistence problems. Debugging skills include viewing logs, entering containers, and viewing detailed information. 6. Performance optimization and best practices include image optimization, resource constraints, network optimization and best practices for using Dockerfile.

DockerVolumes ensures that data remains safe when containers are restarted, deleted, or migrated. 1. Create Volume: dockervolumecreatemydata. 2. Run the container and mount Volume: dockerrun-it-vmydata:/app/dataubuntubash. 3. Advanced usage includes data sharing and backup.

The steps to update a Docker image are as follows: Pull the latest image tag New image Delete the old image for a specific tag (optional) Restart the container (if needed)

Four ways to exit Docker container: Use Ctrl D in the container terminal Enter exit command in the container terminal Use docker stop <container_name> Command Use docker kill <container_name> command in the host terminal (force exit)

Docker security enhancement methods include: 1. Use the --cap-drop parameter to limit Linux capabilities, 2. Create read-only containers, 3. Set SELinux tags. These strategies protect containers by reducing vulnerability exposure and limiting attacker capabilities.

How to restart the Docker container: get the container ID (docker ps); stop the container (docker stop <container_id>); start the container (docker start <container_id>); verify that the restart is successful (docker ps). Other methods: Docker Compose (docker-compose restart) or Docker API (see Docker documentation).

Methods for copying files to external hosts in Docker: Use the docker cp command: Execute docker cp [Options] <Container Path> <Host Path>. Using data volumes: Create a directory on the host, and use the -v parameter to mount the directory into the container when creating the container to achieve bidirectional file synchronization.

How to use Docker Desktop? Docker Desktop is a tool for running Docker containers on local machines. The steps to use include: 1. Install Docker Desktop; 2. Start Docker Desktop; 3. Create Docker image (using Dockerfile); 4. Build Docker image (using docker build); 5. Run Docker container (using docker run).
