build(deps): bump docker from 29.5.0-cli to 29.5.1-cli in /Containers/mastercontainer (#8177 )

build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.0-cli to 29.5.1-cli. --- updated-dependencies: - dependency-name: docker dependency-version: 29.5.1-cli dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2026-05-21 02:40:09 +00:00 · 2026-05-20 10:50:58 +02:00 · 2026-05-20 08:36:32 +00:00 · 2026-05-20 10:20:56 +02:00 · 2026-05-20 09:32:49 +07:00
2 changed files with 2 additions and 2 deletions
--- a/Containers/mastercontainer/Dockerfile
+++ b/Containers/mastercontainer/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:latest
 # Docker CLI is a requirement
-FROM docker:29.5.0-cli AS docker
+FROM docker:29.5.1-cli AS docker

 ARG CADDY_REMOTE_HOST_HASH=e80a9931765a8dbcbb47db415863387f0df0e1b3

--- a/Containers/mastercontainer/supervisord.conf
+++ b/Containers/mastercontainer/supervisord.conf
@@ -54,7 +54,7 @@ stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
 command=/session-deduplicator.sh
-user=root
+user=www-data

 [program:domain-validator]
 # Logging is disabled as otherwise all attempts will be logged which spams the logs
Author	SHA1	Message	Date
Simon L.	abbe6a85cf	build(deps): bump docker from 29.5.0-cli to 29.5.1-cli in /Containers/mastercontainer (#8177 )	2026-05-20 10:50:58 +02:00
dependabot[bot]	20835baa0c	build(deps): bump docker in /Containers/mastercontainer Bumps docker from 29.5.0-cli to 29.5.1-cli. --- updated-dependencies: - dependency-name: docker dependency-version: 29.5.1-cli dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-20 08:36:32 +00:00
Simon L.	a32568cc9c	mastercontainer: run session-deduplicator as www-data (#8175 )	2026-05-20 10:20:56 +02:00
Dimas D. Angga	c6748dc450	fix(mastercontainer): run session-deduplicator as www-data The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.	2026-05-20 09:32:49 +07:00