HCL Commerce Version 9.1.14.0 or later

Running Docker images as the root user

In previous versions of HCL Commerce, Docker images were run with root privileges by default. This default setting changed in HCL Commerce 9.1.14.0 to ensure that full access is denied to the image and its contents. This change improves overall deployment security, but has major implications to existing deployments.

Before you begin

Learn about the benefits, limitations, and requirements for running your Docker images as a non-root user before upgrading to HCL Commerce 9.1.14.0 or greater. For more information, see HCL Commerce container users and privileges.

About this task

While it is recommended to run HCL Commerce containers as a non-root user, existing limitations can prevent existing deployments from fully functioning with this change.
  • Docker-based deployments as root are no longer supported with HCL Commerce 9.1.14.0 or greater.
  • For Kubernetes deployments, you can configure your HCL Commerce Helm Chart to deploy HCL Commerce containers as the root user. It is recommended to only do so temporarily, while taking the time to address any incompatibilities as soon as possible for future deployments.

Procedure

Deploy your HCL Commerce Helm Chart with the runAsNonRoot.enabled parameter set to false in your values.yaml configuration file.
For more information on the HCL Commerce Kubernetes deployment and the HCL Commerce Helm Chart, see Deploying HCL Commerce Version 9.1 on Kubernetes.

Results

HCL Commerce Docker images are now run with root privileges. It is highly recommended to modify your deployment to conform with the inclusion of the non-root user, to increase your deployment security, and to conform with future HCL Commerce updates.