not rootless
Morriz opened this issue · comments
Why is this image not rootless? Is it hard to implement?
Hello,
whoami has been built to be used inside the tests of Traefik and with containers.
The target was not to create a tool outside of Traefik's context.
I understand, but while using it to test for external access (headers etc) we are potentially vulnerable. So what does it need to become rootless? I am pretty sure you guys thought about it as dockerized http servers running as root has been a no go for some years now