@@ -31,8 +31,8 @@ RUN <<-EOT
3131 apt-get update
3232 apt-get install -y curl tar apt-transport-https ca-certificates gnupg locales
3333 locale-gen en_US.UTF-8
34- groupadd --gid 1001 non-root-user
35- useradd --uid 1001 --gid 1001 -m non-root-user
34+ groupadd --gid 1001 non-root-group
35+ useradd --uid 1001 --gid non-root-group -m non-root-group
3636 apt-get clean
3737 rm -rf /var/lib/apt/lists/*
3838EOT
@@ -71,8 +71,9 @@ RUN <<-EOT
7171 /usr/lib/jvm/graalvm*/lib/installer
7272EOT
7373
74- # Switch to non-root user during runtime for security
75- USER non-root-user
74+ # Switch to non-root group during runtime for security
75+ USER non-root-group
76+ WORKDIR /home/non-root-group
7677
7778FROM scratch AS default-jdk
7879ARG LATEST_VERSION
@@ -98,8 +99,8 @@ RUN <<-EOT
9899 apt-get install -y curl tar apt-transport-https ca-certificates gnupg \
99100 socat less debian-goodies autossh ca-certificates-java python3-pip locales
100101 locale-gen en_US.UTF-8
101- groupadd --gid 1001 non-root-user
102- useradd --uid 1001 --gid 1001 -m non-root-user
102+ groupadd --gid 1001 non-root-group
103+ useradd --uid 1001 --gid non-root-group -m non-root-group
103104 apt-get clean
104105 rm -rf /var/lib/apt/lists/*
105106 mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/bin
@@ -141,8 +142,9 @@ RUN <<-EOT
141142 rm -rf /var/lib/apt/lists/*
142143EOT
143144
144- # Switch to non-root user during runtime for security
145- USER non-root-user
145+ # Switch to non-root group during runtime for security
146+ USER non-root-group
147+ WORKDIR /home/non-root-group
146148
147149# IBM specific env variables
148150ENV IBM_JAVA_OPTIONS="-XX:+UseContainerSupport"
@@ -169,8 +171,9 @@ COPY --from=all-jdk /usr/lib/jvm/${VARIANT_LOWER} /usr/lib/jvm/${VARIANT_LOWER}
169171ENV JAVA_${VARIANT_UPPER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
170172ENV JAVA_${VARIANT_LOWER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
171173
172- # Switch to non-root user during runtime for security
173- USER non-root-user
174+ # Switch to non-root group during runtime for security
175+ USER non-root-group
176+ WORKDIR /home/non-root-group
174177
175178# Full image for debugging, contains all JDKs.
176179FROM base AS full
@@ -187,8 +190,9 @@ COPY --from=all-jdk /usr/lib/jvm/ubuntu17 /usr/lib/jvm/ubuntu17
187190COPY --from=all-jdk /usr/lib/jvm/graalvm17 /usr/lib/jvm/graalvm17
188191COPY --from=all-jdk /usr/lib/jvm/graalvm21 /usr/lib/jvm/graalvm21
189192
190- # Switch to non-root user during runtime for security
191- USER non-root-user
193+ # Switch to non-root group during runtime for security
194+ USER non-root-group
195+ WORKDIR /home/non-root-group
192196
193197ENV JAVA_7_HOME=/usr/lib/jvm/7
194198
0 commit comments