Running httpd in container as non-root user using port 80

Question

I have been trying to set uid in centos container as a non root user to run on port 80, is there a Dockerfile or compose that actually sets user to apache and runs on port 80

Answer 1

You could probably try adding this cmd in your dockerfile:

RUN setcap CAP_NET_BIND_SERVICE=+eip /path/to/binary

use setcap on the binary itself rather than a symlink.

Answer 2

Any port under 1024 cannot be opened or used by a non-root user. One of the workaround as using CAP_NET_BIND_SERVICE as mentioned by @Sirajul. 

The other way is redirecting connection from port 80 to port 8080 as that port is accessible by non-root users. Now instead of using accessing apache on port 80, you can access it on port 8080. 

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

You'll have to redirect it with a root user.