@@ -32,10 +32,10 @@ RUN <<-EOT
3232 apt-get install -y curl tar apt-transport-https ca-certificates gnupg locales jq git gh
3333 locale-gen en_US.UTF-8
3434 groupadd --gid 1001 non-root-group
35- useradd --uid 1001 --gid non-root-group -m non-root-group
36- mkdir -p /home/non-root-group /.config
35+ useradd --uid 1001 --gid non-root-group -m non-root-user
36+ mkdir -p /home/non-root-user /.config
3737 git config --system --add safe.directory '*'
38- chown -R non-root-group :non-root-group /home/non-root-group /.config
38+ chown -R non-root-user :non-root-group /home/non-root-user /.config
3939 apt-get clean
4040 rm -rf /var/lib/apt/lists/*
4141EOT
@@ -74,9 +74,9 @@ RUN <<-EOT
7474 /usr/lib/jvm/graalvm*/lib/installer
7575EOT
7676
77- # Switch to non-root group during runtime for security
78- USER non-root-group
79- WORKDIR /home/non-root-group
77+ # Switch to non-root user during runtime for security
78+ USER non-root-user
79+ WORKDIR /home/non-root-user
8080
8181FROM scratch AS default-jdk
8282ARG LATEST_VERSION
@@ -103,10 +103,10 @@ RUN <<-EOT
103103 socat less debian-goodies autossh ca-certificates-java python3-pip locales jq git gh
104104 locale-gen en_US.UTF-8
105105 groupadd --gid 1001 non-root-group
106- useradd --uid 1001 --gid non-root-group -m non-root-group
107- mkdir -p /home/non-root-group /.config
106+ useradd --uid 1001 --gid non-root-group -m non-root-user
107+ mkdir -p /home/non-root-user /.config
108108 git config --system --add safe.directory '*'
109- chown -R non-root-group :non-root-group /home/non-root-group /.config
109+ chown -R non-root-user :non-root-group /home/non-root-user /.config
110110 apt-get clean
111111 rm -rf /var/lib/apt/lists/*
112112 mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/bin
@@ -148,9 +148,9 @@ RUN <<-EOT
148148 rm -rf /var/lib/apt/lists/*
149149EOT
150150
151- # Switch to non-root group during runtime for security
152- USER non-root-group
153- WORKDIR /home/non-root-group
151+ # Switch to non-root user during runtime for security
152+ USER non-root-user
153+ WORKDIR /home/non-root-user
154154
155155# IBM specific env variables
156156ENV IBM_JAVA_OPTIONS="-XX:+UseContainerSupport"
@@ -177,9 +177,9 @@ COPY --from=all-jdk /usr/lib/jvm/${VARIANT_LOWER} /usr/lib/jvm/${VARIANT_LOWER}
177177ENV JAVA_${VARIANT_UPPER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
178178ENV JAVA_${VARIANT_LOWER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
179179
180- # Switch to non-root group during runtime for security
181- USER non-root-group
182- WORKDIR /home/non-root-group
180+ # Switch to non-root user during runtime for security
181+ USER non-root-user
182+ WORKDIR /home/non-root-user
183183
184184# Full image for debugging, contains all JDKs.
185185FROM base AS full
@@ -196,9 +196,9 @@ COPY --from=all-jdk /usr/lib/jvm/ubuntu17 /usr/lib/jvm/ubuntu17
196196COPY --from=all-jdk /usr/lib/jvm/graalvm17 /usr/lib/jvm/graalvm17
197197COPY --from=all-jdk /usr/lib/jvm/graalvm21 /usr/lib/jvm/graalvm21
198198
199- # Switch to non-root group during runtime for security
200- USER non-root-group
201- WORKDIR /home/non-root-group
199+ # Switch to non-root user during runtime for security
200+ USER non-root-user
201+ WORKDIR /home/non-root-user
202202
203203ENV JAVA_7_HOME=/usr/lib/jvm/7
204204
0 commit comments