[PR #21] feat: optional rootless mode #20

Open
opened 2026-10-15 13:01:31 +00:00 by bsakaguchi · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/games-on-whales/wolf-ui/pull/21
Author: @skewballfox
Created: 10/12/2026
Status: 🔄 Open

Base: main ← Head: rootless


📝 Commits (2)

  • d8a938d feat: optional rootless mode
  • 7507c66 fix: fall back when the icon cache dir isn't writable

📊 Changes

4 files changed (+173 additions, -11 deletions)

View changed files

📝 Dockerfile (+12 -0)
📝 readme.md (+36 -0)
➕ scripts/entrypoint.sh (+72 -0)
📝 src/Resources/WolfAPI/v1/Utils.cs (+53 -11)

📄 Description

adds support for running the wolf-ui rootlessly

Add an opt-in rootless mode, in line with Wolf's --rootless. Set WOLF_UI_ROOTLESS=true (or pass --rootless) and start the container as the new unprivileged wolf-ui user (UID/GID 990, overridable with the WOLF_UI_UID/WOLF_UI_GID build args). The root-only GOW init and gosu are skipped, so all capabilities can be dropped.

A new entrypoint wraps the GOW /entrypoint.sh. Without the option it hands over unchanged, so the default behaviour stays the same. In rootless mode it falls back to a temporary HOME if the mounted one isn't writable, and points the GL/EGL/Vulkan loaders at the NVIDIA driver volume (registering it with ldconfig needs root).


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/games-on-whales/wolf-ui/pull/21 **Author:** [@skewballfox](https://github.com/skewballfox) **Created:** 10/12/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `rootless` --- ### 📝 Commits (2) - [`d8a938d`](https://github.com/games-on-whales/wolf-ui/commit/d8a938d63567387a7e8e56c78b5275dc7f00b051) feat: optional rootless mode - [`7507c66`](https://github.com/games-on-whales/wolf-ui/commit/7507c66f23ab824fb3857972b8d299f088694f47) fix: fall back when the icon cache dir isn't writable ### 📊 Changes **4 files changed** (+173 additions, -11 deletions) <details> <summary>View changed files</summary> 📝 `Dockerfile` (+12 -0) 📝 `readme.md` (+36 -0) ➕ `scripts/entrypoint.sh` (+72 -0) 📝 `src/Resources/WolfAPI/v1/Utils.cs` (+53 -11) </details> ### 📄 Description adds support for running the wolf-ui rootlessly Add an opt-in rootless mode, in line with Wolf's --rootless. Set WOLF_UI_ROOTLESS=true (or pass --rootless) and start the container as the new unprivileged `wolf-ui` user (UID/GID 990, overridable with the WOLF_UI_UID/WOLF_UI_GID build args). The root-only GOW init and gosu are skipped, so all capabilities can be dropped. A new entrypoint wraps the GOW /entrypoint.sh. Without the option it hands over unchanged, so the default behaviour stays the same. In rootless mode it falls back to a temporary HOME if the mounted one isn't writable, and points the GL/EGL/Vulkan loaders at the NVIDIA driver volume (registering it with ldconfig needs root). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
games-on-whales/wolf-ui#20
No description provided.