{"action":"created","issue":{"url":"https://api.github.com/repos/grafana/grafana-docker/issues/40","repository_url":"https://api.github.com/repos/grafana/grafana-docker","labels_url":"https://api.github.com/repos/grafana/grafana-docker/issues/40/labels{/name}","comments_url":"https://api.github.com/repos/grafana/grafana-docker/issues/40/comments","events_url":"https://api.github.com/repos/grafana/grafana-docker/issues/40/events","html_url":"https://github.com/grafana/grafana-docker/pull/40","id":154363775,"number":40,"title":"give grafana-server super port powers","user":{"login":"timcharper","id":183,"avatar_url":"https://avatars.githubusercontent.com/u/183?v=3","gravatar_id":"","url":"https://api.github.com/users/timcharper","html_url":"https://github.com/timcharper","followers_url":"https://api.github.com/users/timcharper/followers","following_url":"https://api.github.com/users/timcharper/following{/other_user}","gists_url":"https://api.github.com/users/timcharper/gists{/gist_id}","starred_url":"https://api.github.com/users/timcharper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timcharper/subscriptions","organizations_url":"https://api.github.com/users/timcharper/orgs","repos_url":"https://api.github.com/users/timcharper/repos","events_url":"https://api.github.com/users/timcharper/events{/privacy}","received_events_url":"https://api.github.com/users/timcharper/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2016-05-11T23:14:19Z","updated_at":"2016-05-13T17:12:29Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/grafana/grafana-docker/pulls/40","html_url":"https://github.com/grafana/grafana-docker/pull/40","diff_url":"https://github.com/grafana/grafana-docker/pull/40.diff","patch_url":"https://github.com/grafana/grafana-docker/pull/40.patch"},"body":"This change will allow Grafana to be run on port 80 by invoking `setcap` before launching the process if `GF_SERVER_HTTP_PORT` is < `1024`.\r\n\r\nSince it only runs `setcap` if that variable is set to a privileged port, this change should not affect existing users who run Grafana on the default port."},"comment":{"url":"https://api.github.com/repos/grafana/grafana-docker/issues/comments/219103596","html_url":"https://github.com/grafana/grafana-docker/pull/40#issuecomment-219103596","issue_url":"https://api.github.com/repos/grafana/grafana-docker/issues/40","id":219103596,"user":{"login":"jangaraj","id":1182932,"avatar_url":"https://avatars.githubusercontent.com/u/1182932?v=3","gravatar_id":"","url":"https://api.github.com/users/jangaraj","html_url":"https://github.com/jangaraj","followers_url":"https://api.github.com/users/jangaraj/followers","following_url":"https://api.github.com/users/jangaraj/following{/other_user}","gists_url":"https://api.github.com/users/jangaraj/gists{/gist_id}","starred_url":"https://api.github.com/users/jangaraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jangaraj/subscriptions","organizations_url":"https://api.github.com/users/jangaraj/orgs","repos_url":"https://api.github.com/users/jangaraj/repos","events_url":"https://api.github.com/users/jangaraj/events{/privacy}","received_events_url":"https://api.github.com/users/jangaraj/received_events","type":"User","site_admin":false},"created_at":"2016-05-13T17:12:29Z","updated_at":"2016-05-13T17:12:29Z","body":"I recommend to use another \"microservice\" (docker container), which will be reverse proxy for your grafana:3000 (haproxy, nginx, ....) and which will publish grafana on the standard port 80. Docker namespacing doesn't protect you! Root user in the container can do anything with your kernel, for example kernel panic in your OS (extreme case) :-):\r\n```\r\ndocker run \\\r\n  --rm -ti \\\r\n  --privileged \\\r\n  monitoringartist/docker-killer \\\r\n  kernelpanic\r\n```"}}