Jeremy Lin a2162f4d69

Allow listening on privileged ports (below 1024) as non-root ...

This is done by running `setcap cap_net_bind_service=+ep` on the executable
in the build stage (doing it in the runtime stage creates an extra copy of
the executable that bloats the image). This only works when using the
BuildKit-based builder, since the `COPY` instruction doesn't copy
capabilities on the legacy builder.

2023-02-01 00:35:33 -08:00

..

Dockerfile

Allow listening on privileged ports (below 1024) as non-root

2023-02-01 00:35:33 -08:00

Dockerfile.alpine

Allow listening on privileged ports (below 1024) as non-root

2023-02-01 00:35:33 -08:00

Dockerfile.buildkit

Allow listening on privileged ports (below 1024) as non-root

2023-02-01 00:35:33 -08:00

Dockerfile.buildkit.alpine

Allow listening on privileged ports (below 1024) as non-root

2023-02-01 00:35:33 -08:00