Can Discourse ship frequent Docker images that do not need to be bootstrapped?

That’s an excellent point. There isn’t really a good reason why this script cannot run as non-root.

The setup script is the only one which really needs root, for the scary part where it suggest to execute the docker install script from the internet. So even that can be changed to execute as non-root.

The launcher script doesn’t need root, it just needs write access to /var/discourse and the permission to manage docker containers.

1 Like