dockerRootChecker.js

dockerRootChecker-README.md

Docker Root Checker

Some JavaScript to find out if your App (i.e. Express.js) is

• running inside a docker container
• running under the root user

Sources and inspirations:

• https://forums.docker.com/t/root-user-or-non-root-user-inside-container/966
• https://docs.docker.com/engine/reference/builder/#user
• https://stackoverflow.com/questions/24549746/switching-users-inside-docker-image-to-a-non-root-user
• https://stackoverflow.com/questions/20010199/how-to-determine-if-a-process-runs-inside-lxc-docker
• https://www.npmjs.com/package/is-docker
• https://github.com/sindresorhus/is-docker

dockerRootChecker.js

const util = require('util')
const exec = util.promisify(require('child_process').exec)

const dockerCheck = async () => {
  try {
    const { stdout, stderr } = await exec("grep -E '(lxc|docker)' /proc/1/cgroup")
    if (stderr) console.log('stderr:', stderr)
    if (stdout) return true
    return false
  } catch (e) {
    console.error(e)
    return e
  }
}
const rootCheck = async () => {
  try {
    const { stdout, stderr } = await exec('whoami')
    if (stderr) console.log('stderr:', stderr)
    if (stdout.trim().toLowerCase() == 'root') return true
    return false
  } catch (e) {
    console.error(e)
    return e
  }
}
async function dockerRootChecker() {
  console.log('\x1b[1m', '\x1b[37m', '\x1b[41m', 'Running inside Docker Container:', await dockerCheck(), '\x1b[0m')
  console.log('\x1b[1m', '\x1b[37m', '\x1b[41m', 'Running node process as user root:', await rootCheck(), '\x1b[0m')
}

dockerRootChecker()