Browse Source

Merge pull request #1750 from infosiftr/golang-777

Add a note about world-writeable "/go"
yosifkit 5 years ago
parent
commit
55367ac914
1 changed files with 2 additions and 0 deletions
  1. 2 0
      golang/content.md

+ 2 - 0
golang/content.md

@@ -8,6 +8,8 @@ Go (a.k.a., Golang) is a programming language first developed at Google. It is a
 
 # How to use this image
 
+**Note:** `/go` is world-writable to allow flexibility in the user which runs the container (for example, in a container started with `--user 1000:1000`, running `go get github.com/example/...` will succeed). While the `777` directory would be insecure on a regular host setup, there are not typically other processes or users inside the container, so this is equivilant to `700` for Docker usage, but allowing for `--user` flexibility.
+
 ## Start a Go instance in your app
 
 The most straightforward way to use this image is to use a Go container as both the build and runtime environment. In your `Dockerfile`, writing something along the lines of the following will compile and run your project: