Open
Description
In episode 5, one of the boxes mentions "Don’t run as root" and briefly says it is a bad idea:
https://hsf-training.github.io/hsf-training-docker/05-dockerfiles/index.html#dont-run-as-root
Would be useful to provide links for the people interested on learn why it is a bad idea and security practices in general.
-
Here is a suggestion with a nice description of good practices in security:
https://sysdig.com/blog/dockerfile-best-practices/ -
Information in the Docker docs is also available (but much more technical and full of jargon):
https://docs.docker.com/engine/security/