Can you set effective user to run child as non root user ?

[Nilesh Vaghela]

[Sergey Yarmonov]

I think yes. You can use syscall.Credential to set uid:

ctx := &daemon.Context{
    Credential:  &syscall.Credential{
        Uid: uid,
    },
}