Skip to content

Commit 39156b9

Browse files
committed
Fix non-root-ser
1 parent f89444d commit 39156b9

File tree

1 file changed

+18
-18
lines changed

1 file changed

+18
-18
lines changed

Dockerfile

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,10 @@ RUN <<-EOT
3232
apt-get install -y curl tar apt-transport-https ca-certificates gnupg locales jq git gh
3333
locale-gen en_US.UTF-8
3434
groupadd --gid 1001 non-root-group
35-
useradd --uid 1001 --gid non-root-group -m non-root-group
36-
mkdir -p /home/non-root-group/.config
35+
useradd --uid 1001 --gid non-root-group -m non-root-user
36+
mkdir -p /home/non-root-user/.config
3737
git config --system --add safe.directory '*'
38-
chown -R non-root-group:non-root-group /home/non-root-group/.config
38+
chown -R non-root-user:non-root-group /home/non-root-user/.config
3939
apt-get clean
4040
rm -rf /var/lib/apt/lists/*
4141
EOT
@@ -74,9 +74,9 @@ RUN <<-EOT
7474
/usr/lib/jvm/graalvm*/lib/installer
7575
EOT
7676

77-
# Switch to non-root group during runtime for security
78-
USER non-root-group
79-
WORKDIR /home/non-root-group
77+
# Switch to non-root user during runtime for security
78+
USER non-root-user
79+
WORKDIR /home/non-root-user
8080

8181
FROM scratch AS default-jdk
8282
ARG LATEST_VERSION
@@ -103,10 +103,10 @@ RUN <<-EOT
103103
socat less debian-goodies autossh ca-certificates-java python3-pip locales jq git gh
104104
locale-gen en_US.UTF-8
105105
groupadd --gid 1001 non-root-group
106-
useradd --uid 1001 --gid non-root-group -m non-root-group
107-
mkdir -p /home/non-root-group/.config
106+
useradd --uid 1001 --gid non-root-group -m non-root-user
107+
mkdir -p /home/non-root-user/.config
108108
git config --system --add safe.directory '*'
109-
chown -R non-root-group:non-root-group /home/non-root-group/.config
109+
chown -R non-root-user:non-root-group /home/non-root-user/.config
110110
apt-get clean
111111
rm -rf /var/lib/apt/lists/*
112112
mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/bin
@@ -148,9 +148,9 @@ RUN <<-EOT
148148
rm -rf /var/lib/apt/lists/*
149149
EOT
150150

151-
# Switch to non-root group during runtime for security
152-
USER non-root-group
153-
WORKDIR /home/non-root-group
151+
# Switch to non-root user during runtime for security
152+
USER non-root-user
153+
WORKDIR /home/non-root-user
154154

155155
# IBM specific env variables
156156
ENV IBM_JAVA_OPTIONS="-XX:+UseContainerSupport"
@@ -177,9 +177,9 @@ COPY --from=all-jdk /usr/lib/jvm/${VARIANT_LOWER} /usr/lib/jvm/${VARIANT_LOWER}
177177
ENV JAVA_${VARIANT_UPPER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
178178
ENV JAVA_${VARIANT_LOWER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
179179

180-
# Switch to non-root group during runtime for security
181-
USER non-root-group
182-
WORKDIR /home/non-root-group
180+
# Switch to non-root user during runtime for security
181+
USER non-root-user
182+
WORKDIR /home/non-root-user
183183

184184
# Full image for debugging, contains all JDKs.
185185
FROM base AS full
@@ -196,9 +196,9 @@ COPY --from=all-jdk /usr/lib/jvm/ubuntu17 /usr/lib/jvm/ubuntu17
196196
COPY --from=all-jdk /usr/lib/jvm/graalvm17 /usr/lib/jvm/graalvm17
197197
COPY --from=all-jdk /usr/lib/jvm/graalvm21 /usr/lib/jvm/graalvm21
198198

199-
# Switch to non-root group during runtime for security
200-
USER non-root-group
201-
WORKDIR /home/non-root-group
199+
# Switch to non-root user during runtime for security
200+
USER non-root-user
201+
WORKDIR /home/non-root-user
202202

203203
ENV JAVA_7_HOME=/usr/lib/jvm/7
204204

0 commit comments

Comments
 (0)