@@ -27,10 +27,10 @@ RUN <<-EOT
2727 apt-get install -y curl tar apt-transport-https ca-certificates gnupg locales jq git gh
2828 locale-gen en_US.UTF-8
2929 groupadd --gid 1001 non-root-group
30- useradd --uid 1001 --gid non-root-group -m non-root-group
31- mkdir -p /home/non-root-group /.config
30+ useradd --uid 1001 --gid non-root-group -m non-root-user
31+ mkdir -p /home/non-root-user /.config
3232 git config --system --add safe.directory '*'
33- chown -R non-root-group :non-root-group /home/non-root-group /.config
33+ chown -R non-root-user :non-root-group /home/non-root-user /.config
3434 apt-get clean
3535 rm -rf /var/lib/apt/lists/*
3636EOT
@@ -69,9 +69,9 @@ RUN <<-EOT
6969 /usr/lib/jvm/graalvm*/lib/installer
7070EOT
7171
72- # Switch to non-root group during runtime for security
73- USER non-root-group
74- WORKDIR /home/non-root-group
72+ # Switch to non-root user during runtime for security
73+ USER non-root-user
74+ WORKDIR /home/non-root-user
7575
7676FROM scratch AS default-jdk
7777
@@ -94,10 +94,10 @@ RUN <<-EOT
9494 socat less debian-goodies autossh ca-certificates-java python3-pip locales jq git gh
9595 locale-gen en_US.UTF-8
9696 groupadd --gid 1001 non-root-group
97- useradd --uid 1001 --gid non-root-group -m non-root-group
98- mkdir -p /home/non-root-group /.config
97+ useradd --uid 1001 --gid non-root-group -m non-root-user
98+ mkdir -p /home/non-root-user /.config
9999 git config --system --add safe.directory '*'
100- chown -R non-root-group :non-root-group /home/non-root-group /.config
100+ chown -R non-root-user :non-root-group /home/non-root-user /.config
101101 apt-get clean
102102 rm -rf /var/lib/apt/lists/*
103103 mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/bin
@@ -139,9 +139,9 @@ RUN <<-EOT
139139 rm -rf /var/lib/apt/lists/*
140140EOT
141141
142- # Switch to non-root group during runtime for security
143- USER non-root-group
144- WORKDIR /home/non-root-group
142+ # Switch to non-root user during runtime for security
143+ USER non-root-user
144+ WORKDIR /home/non-root-user
145145
146146# IBM specific env variables
147147ENV IBM_JAVA_OPTIONS="-XX:+UseContainerSupport"
@@ -167,9 +167,9 @@ COPY --from=all-jdk /usr/lib/jvm/${VARIANT_LOWER} /usr/lib/jvm/${VARIANT_LOWER}
167167ENV JAVA_${VARIANT_UPPER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
168168ENV JAVA_${VARIANT_LOWER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
169169
170- # Switch to non-root group during runtime for security
171- USER non-root-group
172- WORKDIR /home/non-root-group
170+ # Switch to non-root user during runtime for security
171+ USER non-root-user
172+ WORKDIR /home/non-root-user
173173
174174# Full image for debugging, contains all JDKs.
175175FROM base AS full
@@ -186,9 +186,9 @@ COPY --from=all-jdk /usr/lib/jvm/ubuntu17 /usr/lib/jvm/ubuntu17
186186COPY --from=all-jdk /usr/lib/jvm/graalvm17 /usr/lib/jvm/graalvm17
187187COPY --from=all-jdk /usr/lib/jvm/graalvm21 /usr/lib/jvm/graalvm21
188188
189- # Switch to non-root group during runtime for security
190- USER non-root-group
191- WORKDIR /home/non-root-group
189+ # Switch to non-root user during runtime for security
190+ USER non-root-user
191+ WORKDIR /home/non-root-user
192192
193193ENV JAVA_7_HOME=/usr/lib/jvm/7
194194
0 commit comments