Minimal Sonarr Image with a Non-Root User
321
The goal of this project is to create a containerized Radarr application that will run non privileged with a minimal attack surface area, you can check the container for any vulnerabilities by clicking on the quay.io badge above.
security sonarr minimal
This image is built on Docker Hub automatically any time the upstream OS container is rebuilt, and any time a commit is made or merged to the master branch. But if you need to build the image on your own locally, do the following:
cd into this directory.docker build -t sonarr-alpine .docker pull synominit/docker-sonarr-alpinedocker run -d -p 8989:8989 \
-v /path/to/host:/config \
-v /path/to/host:/downloads \
-v /path/to/host:/tv \
synominit/docker-sonarr-alpine
This image is run as a non root user in order to correctly map the folders to allow read and writing.
Users will have to be created on the host specifically for this purpose.
A script will be added for ease of use, for now the following command can be run on the host:
adduser -M --uid 76627 --no-create-home sonarr
Then map the created user to the folders on the host with the appropriate permissions
Created in 2020 by Skye Pham, DevOps Architect, Reverse Engineering and Security Specialist.
Content type
Image
Digest
Size
117.4 MB
Last updated
over 6 years ago
docker pull synominit/docker-sonarr-alpine