- superset

- tools

Author: lfrancke

superset/Dockerfile

@@ -119,8 +119,8 @@ microdnf install \
 microdnf clean all
 rm -rf /var/cache/yum
 
-# All files and folders owned by root to support running as arbitrary users
-# This is best practice as all container users will belong to the root group (0)
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
 chown -R ${STACKABLE_USER_UID}:0 /stackable
 chmod -R g=u /stackable
 EOF

tools/Dockerfile

@@ -8,6 +8,7 @@ ARG KUBECTL_VERSION
 ARG RELEASE
 ARG JQ_VERSION
 ARG TARGETARCH
+ARG STACKABLE_USER_UID
 
 LABEL name="Stackable Tools" \
     maintainer="[email protected]" \
@@ -30,16 +31,23 @@ RUN microdnf update && \
 
 COPY tools/licenses /licenses
 
-USER stackable
 WORKDIR /stackable/bin
 ENV PATH=/stackable/bin:$PATH
 
 # Get latest stable version from curl -L -s https://dl.k8s.io/release/stable.txt
-RUN curl https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl \
-    -o /stackable/bin/kubectl && chmod +x /stackable/bin/kubectl
-
-RUN curl https://github.com/stedolan/jq/releases/download/jq-${JQ_VERSION}/jq-linux64 \
-    -o /stackable/bin/jq && \
-    chmod +x /stackable/bin/jq
-
-USER stackable
+RUN <<EOF
+curl https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl \
+    -o /stackable/bin/kubectl
+chmod +x /stackable/bin/kubectl
+
+curl https://github.com/stedolan/jq/releases/download/jq-${JQ_VERSION}/jq-linux64 \
+    -o /stackable/bin/jq
+chmod +x /stackable/bin/jq
+
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
+chown -R ${STACKABLE_USER_UID}:0 /stackable
+chmod -R g=u /stackable
+EOF
+
+USER ${STACKABLE_USER_UID}