Non-root user not able to start w3svc service in docker

[srbhklkrn]

Non-root user not able to start w3svc service in docker

[rawahars]

Hi,

Do we have any workaround or guidelines around using IIS with a non-root user (ContainerUser) inside the containers?
Any help would be highly appreciated.

[paulofrazao]

+1 - Any update??

[LeVraiSylvain]

Try this into your Dockerfile

# https://woshub.com/set-permissions-on-windows-service/
# ContainerUser's SID is S-1-5-93-2-2`
RUN FOR /F "tokens=*" %a in ('sc sdshow w3svc') do SET serviceDescriptor=%a && `
    CALL sc sdset w3svc "%serviceDescriptor:~0,2%(A;;LCRPWP;;;S-1-5-93-2-2)%serviceDescriptor:~2%"
RUN icacls "%windir%\system32\inetsrv\Config" /grant "User Manager\ContainerUser":(CI)(OI)M

USER ContainerUser

ENTRYPOINT ["C:\ServiceMonitor.exe", "w3svc"]