Skip to content

Commit 69fbd63

Browse files
committed
fix: rootless container
1 parent deb209e commit 69fbd63

File tree

1 file changed

+8
-6
lines changed

1 file changed

+8
-6
lines changed

Dockerfile

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,13 +21,15 @@ RUN apk add build-base &&\
2121
make build-dashboard
2222

2323
FROM alpine:latest
24-
WORKDIR /root/
24+
RUN adduser -D -h /authorizer -u 1000 -k /dev/null authorizer
25+
WORKDIR /authorizer
2526
RUN mkdir app dashboard
26-
COPY --from=node-builder /authorizer/app/build app/build
27-
COPY --from=node-builder /authorizer/app/favicon_io app/favicon_io
28-
COPY --from=node-builder /authorizer/dashboard/build dashboard/build
29-
COPY --from=node-builder /authorizer/dashboard/favicon_io dashboard/favicon_io
30-
COPY --from=go-builder /authorizer/build build
27+
COPY --from=node-builder --chown=nobody:nobody /authorizer/app/build app/build
28+
COPY --from=node-builder --chown=nobody:nobody /authorizer/app/favicon_io app/favicon_io
29+
COPY --from=node-builder --chown=nobody:nobody /authorizer/dashboard/build dashboard/build
30+
COPY --from=node-builder --chown=nobody:nobody /authorizer/dashboard/favicon_io dashboard/favicon_io
31+
COPY --from=go-builder --chown=nobody:nobody /authorizer/build build
3132
COPY templates templates
3233
EXPOSE 8080
34+
USER authorizer
3335
CMD [ "./build/server" ]

0 commit comments

Comments
 (0)