Jeremy Lin a2162f4d69 Allow listening on privileged ports (below 1024) as non-root ...

This is done by running `setcap cap_net_bind_service=+ep` on the executable
in the build stage (doing it in the runtime stage creates an extra copy of
the executable that bloats the image). This only works when using the
BuildKit-based builder, since the `COPY` instruction doesn't copy
capabilities on the legacy builder.

2023-02-01 00:35:33 -08:00

5.0 KiB

Raw Blame History

View Raw