Записки молодого девопсера
У nginx есть отдельный аккаунт, под которым они публикуют образ nginx-unprivileged https://hub.docker.com/r/nginxinc/nginx-unprivileged, который запускается в непривилегированном режиме.
Отличия от образа nginx следующие:
This Docker Hub repository hosts NGINX Docker images that run NGINX as a non root, unprivileged user. Notable differences with respect to the official NGINX Docker image include:
The default NGINX listen port is now 8080 instead of 80.
The default NGINX user directive in /etc/nginx/nginx.conf has been removed.
The default NGINX PID has been moved from /var/run/nginx.pid to /tmp/nginx.pid. *Change _temp_path variables to /tmp/.
1 · 217 ·