Simple Go-based setuid+setgid+setgroups+exec


This is a simple tool grown out of the simple fact that "su" and "sudo" have very strange and often annoying TTY and signal-forwarding behavior. They're also somewhat complex to setup and use (especially in the case of "sudo"), which allows for a great deal of expressivity, but falls flat if all you need is "run this specific application as this specific user and get out of the pipeline".

The core of how "gosu" works is stolen directly from how Docker/libcontainer itself starts an application inside a container (and in fact, is using the "/etc/passwd" processing code directly from libcontainer's codebase).

Once the user/group is processed, we switch to that user, then we "exec" the specified process and "gosu" itself is no longer resident or involved in the process lifecycle at all. This avoids all the issues of signal passing and TTY, and punts them to the process invoking "gosu" and the process being invoked by "gosu", where they belong.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V



Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install gosu