Ensure Postfix starts in the container, now it runs as non-root by default. Fixes #5076

Dockerfile

@@ -162,11 +162,13 @@ RUN apk add --no-cache --virtual \
         postgresql-client \
         postgresql-libs \
         shadow \
+        sudo \
         libcap && \
     pip install --upgrade pip && \
     pip install --no-cache-dir -r requirements.txt && \
     pip install --no-cache-dir gunicorn==19.9.0 && \
-    apk del --no-cache build-deps
+    apk del --no-cache build-deps && \
+    echo "pgadmin ALL = NOPASSWD: /usr/sbin/postfix start" > /etc/sudoers.d/postfix
 
 # We need the v12 libpq, which is only in the 'edge' build of Alpine at present
 COPY --from=pg12-builder /usr/local/lib/libpq.so.5.12 /usr/lib/

docs/en_US/release_notes_4_18.rst

@@ -30,3 +30,4 @@ Bug fixes
 | `Issue #5065 <https://redmine.postgresql.org/issues/5065>`_ -  Updated the incorrect icon used for the cast node on refresh.
 | `Issue #5066 <https://redmine.postgresql.org/issues/5066>`_ -  Fix an issue where refreshing a package results in the change in the object completely.
 | `Issue #5074 <https://redmine.postgresql.org/issues/5074>`_ -  Fix an issue where select, insert and update scripts on tables throwing an error.
+| `Issue #5076 <https://redmine.postgresql.org/issues/5076>`_ -  Ensure Postfix starts in the container, now it runs as non-root by default.

pkg/docker/entrypoint.sh

@@ -48,7 +48,7 @@ if [ ! -f /var/lib/pgadmin/pgadmin4.db ]; then
 fi
 
 # Start Postfix to handle password resets etc.
-/usr/sbin/postfix start
+sudo /usr/sbin/postfix start
 
 # Get the session timeout from the pgAdmin config. We'll use this (in seconds)
 # to define the Gunicorn worker timeout