{"action":"created","issue":{"url":"https://api.github.com/repos/jupyter/tmpnb/issues/180","labels_url":"https://api.github.com/repos/jupyter/tmpnb/issues/180/labels{/name}","comments_url":"https://api.github.com/repos/jupyter/tmpnb/issues/180/comments","events_url":"https://api.github.com/repos/jupyter/tmpnb/issues/180/events","html_url":"https://github.com/jupyter/tmpnb/issues/180","id":111770914,"number":180,"title":"Update default command to call start-notebook.sh","user":{"login":"DavidPowell","id":1106295,"avatar_url":"https://avatars.githubusercontent.com/u/1106295?v=3","gravatar_id":"","url":"https://api.github.com/users/DavidPowell","html_url":"https://github.com/DavidPowell","followers_url":"https://api.github.com/users/DavidPowell/followers","following_url":"https://api.github.com/users/DavidPowell/following{/other_user}","gists_url":"https://api.github.com/users/DavidPowell/gists{/gist_id}","starred_url":"https://api.github.com/users/DavidPowell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DavidPowell/subscriptions","organizations_url":"https://api.github.com/users/DavidPowell/orgs","repos_url":"https://api.github.com/users/DavidPowell/repos","events_url":"https://api.github.com/users/DavidPowell/events{/privacy}","received_events_url":"https://api.github.com/users/DavidPowell/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-16T06:37:25Z","updated_at":"2015-10-16T11:21:28Z","closed_at":null,"body":"All the recent jupyter docker images have a default command `start-notebook.sh`. The main function of this command appears to be to launch the notebook as the user jovyan, rather than as root.\r\n\r\nHowever, orchestrate.py defaults to running `ipython notebook`, which (aside from being out of date) bypasses this command, and leaves the notebook server running as root. Although running as root inside a docker container is not as serious as on the host, it's definitely not best-practice security.\r\n\r\nAttempting to pass `start-notebook.sh` as the `--command` option to `orchestrate.py` causes an error with `su` not recognising the `--ip=0.0.0.0` option. I presume this means that something is being escaped incorrectly, but I'm not sure what.\r\n\r\nI think the ideal solution would be that `start-notebook.sh` is called by default, but in the mean-time I'd welcome a temporary solution so I can override this manually."},"comment":{"url":"https://api.github.com/repos/jupyter/tmpnb/issues/comments/148687669","html_url":"https://github.com/jupyter/tmpnb/issues/180#issuecomment-148687669","issue_url":"https://api.github.com/repos/jupyter/tmpnb/issues/180","id":148687669,"user":{"login":"parente","id":153745,"avatar_url":"https://avatars.githubusercontent.com/u/153745?v=3","gravatar_id":"","url":"https://api.github.com/users/parente","html_url":"https://github.com/parente","followers_url":"https://api.github.com/users/parente/followers","following_url":"https://api.github.com/users/parente/following{/other_user}","gists_url":"https://api.github.com/users/parente/gists{/gist_id}","starred_url":"https://api.github.com/users/parente/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parente/subscriptions","organizations_url":"https://api.github.com/users/parente/orgs","repos_url":"https://api.github.com/users/parente/repos","events_url":"https://api.github.com/users/parente/events{/privacy}","received_events_url":"https://api.github.com/users/parente/received_events","type":"User","site_admin":false},"created_at":"2015-10-16T11:21:28Z","updated_at":"2015-10-16T11:21:28Z","body":"The playbook for the tmpnb.org site sets the command like so:\r\n\r\nhttps://github.com/jupyter/tmpnb-deploy/blob/master/vars.yml#L10"}}