docker 内 server 降权运行

dockerfiles/oj_web_server/supervisord.conf

@@ -1,26 +1,21 @@
 [unix_http_server]
-file=/tmp/supervisor.sock   ; path to your socket file
-
+file=/tmp/supervisor.sock
 [supervisord]
-logfile=/code/log/supervisord.log ; supervisord log file
-logfile_maxbytes=50MB       ; maximum size of logfile before rotation
-logfile_backups=10          ; number of backed up logfiles
-loglevel=info               ; info, debug, warn, trace
-pidfile=/code/log/supervisord.pid ; pidfile location
-nodaemon=true             ; run supervisord as a daemon
-minfds=1024                 ; number of startup file descriptors
-minprocs=200                ; number of process descriptors
-user=root                   ; default user
-childlogdir=/code/log/            ; where child log files will live
-
+logfile=/code/log/supervisord.log
+logfile_maxbytes=50MB
+logfile_backups=10
+loglevel=info
+pidfile=/code/log/supervisord.pid
+nodaemon=true
+minfds=1024
+minprocs=200
+user=nobody
+childlogdir=/code/log/
 
 [rpcinterface:supervisor]
 supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
-
 [supervisorctl]
-serverurl=unix:///tmp/supervisor.sock ; use unix:// schem for a unix sockets.
-
+serverurl=unix:///tmp/supervisor.sock
 
 [include]
-
 files=gunicorn.conf task_queue.conf