Skip to content

Commit

Permalink
Add see also links (dotnet#36494)
Browse files Browse the repository at this point in the history
  • Loading branch information
gewarren authored Aug 9, 2023
1 parent 273418e commit af1a731
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 6 deletions.
10 changes: 5 additions & 5 deletions docs/core/compatibility/containers/8.0/app-user.md
Original file line number Diff line number Diff line change
@@ -1,19 +1,19 @@
---
title: "Breaking change: New 'app' user in Linux images"
description: Learn about the breaking change in containers where a new 'app' user was added in Linux container images.
title: "Breaking change: New non-root 'app' user in Linux images"
description: Learn about the breaking change in containers where a new non-root 'app' user was added in Linux container images.
ms.date: 07/12/2023
---
# New 'app' user in Linux images
# New non-root 'app' user in Linux images

The .NET Linux container images include a new `non-root` user named `app`. You can opt into this new user to provide security benefits. The name of this user may conflict with an existing user defined by an application's Dockerfile.
The .NET Linux container images include a new non-root user named `app`. You can opt into this new user to provide security benefits. The name of this user may conflict with an existing user defined by an application's Dockerfile.

## Previous behavior

Prior to .NET 8, the Linux container images did not include any additional users beyond what was included by default in the base Linux container image (for example, Debian, Alpine, and Ubuntu).

## New behavior

Starting in .NET 8, Linux container images define a user named `app`` that can be opted-into for additional security benefits. However, the name of this user may conflict with an existing user that was defined by the application's Dockerfile. If the application's Dockerfile attempts to create a user with the same name, an error might occur saying that the user already exists.
Starting in .NET 8, Linux container images define a user named `app` that can be opted-into for additional security benefits. However, the name of this user may conflict with an existing user that was defined by the application's Dockerfile. If the application's Dockerfile attempts to create a user with the same name, an error might occur saying that the user already exists.

## Version introduced

Expand Down
5 changes: 4 additions & 1 deletion docs/core/compatibility/containers/8.0/aspnet-port.md
Original file line number Diff line number Diff line change
Expand Up @@ -54,4 +54,7 @@ None.

## See also

- [Port switch blog post](https://devblogs.microsoft.com/dotnet/securing-containers-with-rootless/#switching-to-port-8080)
- [New non-root 'app' user in Linux images](app-user.md)
- [Containerize a .NET app](../../../docker/publish-as-container.md)
- [Blog: Secure your .NET cloud apps with rootless Linux containers](https://devblogs.microsoft.com/dotnet/securing-containers-with-rootless/#switching-to-port-8080)
- [Bog: Running non-root .NET containers with Kubernetes](https://devblogs.microsoft.com/dotnet/running-nonroot-kubernetes-with-dotnet/)

0 comments on commit af1a731

Please sign in to comment.