Connect to docker container as user other than root
For docker run
:
Simply add the option --user <user>
to change to another user when you start the docker container.
docker run -it --user nobody busybox
For docker attach
or docker exec
:
Since the command is used to attach/execute into the existing process, therefore it uses the current user there directly.
docker run -it busybox # CTRL-P/Q to quitdocker attach <container id> # then you have root user/ # iduid=0(root) gid=0(root) groups=10(wheel)docker run -it --user nobody busybox # CTRL-P/Q to quitdocker attach <container id> / $ iduid=99(nobody) gid=99(nogroup)
If you really want to attach to the user you want to have, then
- start with that user
run --user <user>
or mention it in yourDockerfile
usingUSER
- change the user using `su
You can run a shell in a running docker container using a command like:
docker exec -it --user root <container id> /bin/bash
You can specify USER
in the Dockerfile. All subsequent actions will be performed using that account. You can specify USER
one line before the CMD
or ENTRYPOINT
if you only want to use that user when launching a container (and not when building the image). When you start a container from the resulting image, you will attach as the specified user.