
Running Docker images as the root user
In previous versions of HCL Commerce, Docker images were run with root
privileges by default. This default setting changed in HCL Commerce 9.1.14.0 to ensure
that full access is denied to the image and its contents. This change improves overall deployment
security, but has major implications to existing deployments.
Before you begin
About this task
- Docker-based deployments as root are no longer supported with HCL Commerce 9.1.14.0 or greater.
- For Kubernetes deployments, you can configure your HCL Commerce Helm Chart to deploy HCL Commerce containers as the root user. It is recommended to only do so temporarily, while taking the time to address any incompatibilities as soon as possible for future deployments.
Procedure
Deploy your HCL Commerce Helm Chart with the
runAsNonRoot.enabled parameter set to false in your
values.yaml configuration file.
For more information on the HCL Commerce Kubernetes deployment and the HCL Commerce Helm Chart, see Deploying HCL Commerce Version 9.1 on Kubernetes.