`Exec` as unprivileged user about tini HOT 3 CLOSED

I do feel that Tini serves its users best when it does one thing well (and that's reaping zombies and forwarding the child's exit code :) ). If I were to add user parsing and su / exec, it might take some effort to be as robust / accurate as gosu's or su-exec's, and as these tools evolve, I might fall behind 😢

So, especially for cases like this where there is absolutely no downside to using other tools, I think it's best they remain separate (for cases like #69 where there are no such easily composable tools, I'm totally open to it as long as it doesn't introduce unreasonable complexity / bloat).

Thanks!

from tini.

Hi there,

Have you considered chaining Tini with a tool that does this, such as https://github.com/tianon/gosu or https://github.com/ncopa/su-exec?

For example, if you install gosu, then you can use the following to run as an unprivileged user with group group:

gosu user:group tini -- some-command-goes-here

(or vice versa - the order of gosu / su-exec and Tini should not matter)

from tini.

I am definitely open to that. Do you see this as an unnecessary addition? I can understand where you are coming from but would like to avoid additional dependencies if possible. If this is not something that is of interest, I will use the suggested tool. Thanks!

from tini.