@Sébastien, @Danny, what do you think about radosgw daemon? It still runs as root.
I've got my own draft for switching to non-root user for RGW:
https://github.com/odivlad/ceph/commit/1914e5f5bd20b6d6bb2da1260e3bd77d419784e9
I think, RGW should use its own user, for instance, radosgw, because ceph user has raw access to filesystem and RGW doesn't need it.
I suggest:
1. On package installation: check if radosgw user exists and create it in ceph group in case of absence.
2. On package removal: try to remove radosgw user.
3. Change DEFAULT_USER in RGW initscript to radosgw
What do you think about it? Should I change something and pull request, or somebody already did this better, and I just haven't found it?
Also these scripts should be added to deb post and pre scripts, but it was not a goal for me.