not rootless

[Morriz]

Why is this image not rootless? Is it hard to implement?

[ldez]

Hello,

whoami has been built to be used inside the tests of Traefik and with containers.

The target was not to create a tool outside of Traefik's context.

[Morriz]

I understand, but while using it to test for external access (headers etc) we are potentially vulnerable. So what does it need to become rootless? I am pretty sure you guys thought about it as dockerized http servers running as root has been a no go for some years now

[eriksjolund]

sidenote: The container image docker.io/traefik/whoami can be used rootless in this way

$ podman run --user 3000:3000 --rm -ti -p 8080:8080 -d docker.io/traefik/whoami -port 8080
8e1b96d6f1b3471d000276107c9d514a27c6af3fe69ab186d253daecfd97f2ce
$ curl localhost:8080
Hostname: 8e1b96d6f1b3
IP: 127.0.0.1
IP: ::1
IP: 10.0.2.15
IP: fe80::9847:bfff:fe08:4412
RemoteAddr: 10.0.2.15:52802
GET / HTTP/1.1
Host: localhost:8080
User-Agent: curl/8.11.1
Accept: */*

(The values UID=3000, GID=3000 are just arbitrarily chosen positive numbers)