Investigate what user Krane processes should run as

[david-castaneda]

Currently, Krane processes run as root. We should investigate and document what the best roles for these types of processes should be. Maybe its root?

[jalvarado91]

So is it root? Could look at how nginx is recommended to be installed.

[david-castaneda]

@jalvarado91 Probaby shouldn't run as root.

It could run under the user krane as an unprivileged user. Any dependencies should be pre-defined before startup.

For example, the db directory is currently created by Krane if it doesn't exist (since its running as root), instead, the db directory should be defined inside the Dockerfile or an install script, creating it if it doesn't already exist.