Skip to content

Latest commit

 

History

History
16 lines (9 loc) · 702 Bytes

build.md

File metadata and controls

16 lines (9 loc) · 702 Bytes

Building

The image can be built from source by running:

    docker build .

A recommended security practice is to add an additional unprivileged user to run the daemon as on the host. For example, as a privileged user, run this on the host:

    useradd lnd

To build an image which uses this unprivileged user's id and group id, run:

    docker build --build-arg USER_ID=$( id -u lnd ) --build-arg GROUP_ID=$( id -g lnd ) .

Now, when the container is run with the default options, the lnd process will only have the privileges of the lnd user on the host machine. This is especially important for a process such as lnd which runs as a network service exposed to the internet.