You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Don't alert on root if running inside docker #14325
Paper alerts the user that they're running as root even if it's inside Docker.
Describe the solution you'd like.
Check for .dockerenv before alerting in console that you're running as the root user. It's kind of annoying, especially as most people run their servers in Docker.
Describe alternatives you've considered.
Check other files like /proc/1/cgroup or /proc/1/mountinfo for strings like "docker" or "container."
root is root, and this is already on the boundary of what we're happy to allow especially given the repeated exploits going around, I don't really want us to go down the route of having code which pokes at procfs, etc
Activity
masmc05 commentedon Sep 30, 2026
https://www.docker.com/blog/understanding-the-docker-user-instruction/
It isn't recommended to run apps as root even inside docker
electronicboy commentedon Sep 30, 2026
root is root, and this is already on the boundary of what we're happy to allow especially given the repeated exploits going around, I don't really want us to go down the route of having code which pokes at procfs, etc