you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago (2 children)

Vaulwarden does this and I'm really frustrated that I have to cap_add NET_BIND_SERVICE in my rootless setup just to make my password server run.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    Are you sure you need that? I just added a —user to the docker run and it started just fine on port 80 in the container.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago

    I'm using podman, and I don't like the practice of unnecessarily setting UIDs. NET_BIND_SERVICE is exactly the flag it needs to set port 80 and it doesn't potentially complicate accessing the files for maintenance. Does your system have SELinux? If not, that might be why you don't need it lol.

  • source
  • parent