Feature Request: Support for Rootless Container Deployment

[rht-jbittner]

Hello,

Following up on our discussion at the conference yesterday, we would like to request support for running the MISP containers as rootless containers.

This is essential for deployments in environments like Openshift, where non-root execution is a security and operational requirement.

Please let us know if there is anything we can do to help with the design, testing, or implementation of this feature.

Thank you.

[Benni0]

I adapted a old version for rootless deployment on openshift some time ago: openshift-compat) Maybe this can help to create a rootless container for the current release.

[rht-jbittner]

Thanks @Benni0 that looks cool. We will try that!

[dygland]

@rht-jbittner have you made any progress with a rootless container? I am very interested in this, hopefully i'll have some time to work on it during the winter holidays.

[rht-jbittner]

Hi @dygland ,

We tried and we gave up. It requires complex rewrite and currently it is very low priority. If you can start something, we are also interested and can chime in eventually.

[mazdafunsunn]

I recently adapted misp-docker to run on OpenShift under restricted SCC constraints. github.com/mazdafunsunn/misp-openshift. Could similar approach would be useful here?