Gitea is not supposed to be run as root (1.20.0-rc1)

[lonix1]

Description

Latest stable
$ docker run --rm -it -p 3000:3000 -p 22:22 -v ./data:/data gitea/gitea:1.19.3

Server listening on :: port 22.
Server listening on 0.0.0.0 port 22.
2023/06/25 01:52:46 cmd/web.go:105:runWeb() [I] Starting Gitea on PID: 17
2023/06/25 01:52:46 ...s/install/setting.go:21:PreloadSettings() [I] AppPath: /usr/local/bin/gitea
2023/06/25 01:52:46 ...s/install/setting.go:22:PreloadSettings() [I] AppWorkPath: /app/gitea
2023/06/25 01:52:46 ...s/install/setting.go:23:PreloadSettings() [I] Custom path: /data/gitea
2023/06/25 01:52:46 ...s/install/setting.go:24:PreloadSettings() [I] Log path: /data/gitea/log
2023/06/25 01:52:46 ...s/install/setting.go:25:PreloadSettings() [I] Configuration file: /data/gitea/conf/app.ini
2023/06/25 01:52:46 ...s/install/setting.go:26:PreloadSettings() [I] Prepare to run install page
2023/06/25 01:52:46 ...s/install/setting.go:29:PreloadSettings() [I] SQLite3 is supported
2023/06/25 01:52:46 cmd/web.go:220:listen() [I] [64979dee-6] Listen: http://0.0.0.0:3000
2023/06/25 01:52:46 cmd/web.go:224:listen() [I] [64979dee-6] AppURL(ROOT_URL): http://localhost:3000/
2023/06/25 01:52:46 ...s/graceful/server.go:62:NewServer() [I] [64979dee-6] Starting new Web server: tcp:0.0.0.0:3000 on PID: 17

Latest RC
docker run --rm -it -p 3000:3000 -p 22:22 -v ./data:/data gitea/gitea:1.20.0-rc1

Server listening on :: port 22.
Server listening on 0.0.0.0 port 22.
2023/06/25 01:54:12 ...s/setting/setting.go:180:loadRunModeFrom() [F] Gitea is not supposed to be run as root. Sorry. If you need to use privileged TCP ports please instead use setcap and the `cap_net_bind_service` permission
2023/06/25 01:54:12 cmd/web.go:227:runWeb() [I] Starting Gitea on PID: 17
2023/06/25 01:54:12 cmd/web.go:105:serveInstall() [I] Gitea version: 1.20.0+rc1 built with GNU Make 4.4.1, go1.20.5 : bindata, timetzdata, sqlite, sqlite_unlock_notify
2023/06/25 01:54:12 cmd/web.go:106:serveInstall() [I] App path: /usr/local/bin/gitea
2023/06/25 01:54:12 cmd/web.go:107:serveInstall() [I] Work path: /app/gitea
2023/06/25 01:54:12 cmd/web.go:108:serveInstall() [I] Custom path: /data/gitea
2023/06/25 01:54:12 cmd/web.go:109:serveInstall() [I] Config file: /data/gitea/conf/app.ini
2023/06/25 01:54:12 cmd/web.go:110:serveInstall() [I] Prepare to run install page
2023/06/25 01:54:13 cmd/web.go:289:listen() [I] Listen: http://0.0.0.0:3000
2023/06/25 01:54:13 cmd/web.go:293:listen() [I] AppURL(ROOT_URL): http://localhost:3000/
2023/06/25 01:54:13 ...s/graceful/server.go:62:NewServer() [I] Starting new Web server: tcp:0.0.0.0:3000 on PID: 17

No errors for 1.19.3, but for 1.20.0-rc1:

2023/06/25 01:54:12 ...s/setting/setting.go:180:loadRunModeFrom() [F] Gitea is not supposed to be run as root. Sorry. If you need to use privileged TCP ports please instead use setcap and the cap_net_bind_service permission

Gitea Version

1.20.0-rc1

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

linux

How are you running Gitea?

docker

Database

SQLite

[wxiaoguang]

Please try 1.20 nightly. It has been fixed by

• Use InitWorkPathAndCfgProvider for environment-to-ini to avoid unnecessary checks (#25480) #25488

(there will be a rc2 soon)

[lunny]

Now you can also use 1.20.0-rc2

[JohnnyZhang0628]

Hello,I have a same question.Gitea version is 1.20.2.

5169aa85df2d:/# gitea -v
Gitea version 1.20.2 built with GNU Make 4.4.1, go1.20.6 : bindata, timetzdata, sqlite, sqlite_unlock_notify
5169aa85df2d:/# gitea doctor check
2023/08/10 08:53:12 ...s/setting/setting.go:180:loadRunModeFrom() [F] Gitea is not supposed to be run as root. Sorry. If you need to use privileged TCP ports please instead use setcap and the `cap_net_bind_service` permission

[lunny]

Run as a plain user.

[JohnnyZhang0628]

Run as a plain user.

@lunny It not work .I create user zq. I add zq to docker group. What should i do

[zq@iZuf66sx2smhrg4iqbxht1Z root]$  docker run -d  --restart=always --name=gitea -p 222:22 -p 3000:3000 -v /var/gitea:/data gitea/gitea 
6e6a83109e586966ab49e4f9045060f66223f993eeb864ed9cde17e7212afd77
[zq@iZuf66sx2smhrg4iqbxht1Z root]$ docker exec -it gitea /bin/bash
6e6a83109e58:/# gitea doctor check
2023/08/11 01:45:07 ...s/setting/setting.go:180:loadRunModeFrom() [F] Gitea is not supposed to be run as root. Sorry. If you need to use privileged TCP ports please instead use setcap and the `cap_net_bind_service` permission
6e6a83109e58:/# exit
exit

[lunny]

You used root in the container.

[lonix1]

@JohnnyZhang0628 docker run ... -u username ...
Where username is not root.

[qiaofeng1227]

Just need to change user at your Gitea container

su git gitea help