package-analysis
package-analysis copied to clipboard
Run analysis image as non-root user
Most of the time, developers install and run packages as non-root users. Currently, commands inside the analysis container run as root which is easy to set up but not as realistic. It would be ideal to have things running as a non-root user, but with (passwordless) sudo access (see #393)
This may be blocked by https://github.com/google/gvisor/issues/7449
Previously there was an upstream issue with gVisor which blocked this, but it's been fixed as of https://github.com/google/gvisor/commit/8e4cb261486ad84bc5657b1cee0288018f693d01