Update Dockerfile (#618)
Update Dockerfile (#618)

Running programs as root that don't require it is a big security risk. Docker is only containerization and not virtualization.
Instead of using the user "nobody" a custom user may be created, but as shadowsocks-rust only uses networking and only reads the config file I see it as unnecessary.
If the server is intended to bind on a privileged port (<1024) Docker's port mapping may be used or a program such as nftables or setcap may be used.
shadowsocks/shadowsocks-rust,zonyitoo/shadowsocks-rust,shadowsocks/shadowsocks-rust,shadowsocks/shadowsocks-rust,shadowsocks/shadowsocks-rust