change docker running user to non root

WeBankPartners · Nov 28, 2024 · a4d92a6 · a4d92a6
1 parent c232dd5
commit a4d92a6
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -27,4 +27,9 @@ COPY etc /etc/itsdangerous
 # USER app
 COPY build/start_all.sh /scripts/start_all.sh
 RUN chmod +x /scripts/start_all.sh
-CMD ["/bin/sh","-c","/scripts/start_all.sh"]
+RUN addgroup --system --gid 6000 apps && useradd --uid 6001 --gid 6000 app
+RUN chown -R app:apps /etc/itsdangerous && chmod -R 755 /etc/itsdangerous
+RUN chown -R app:apps /var/log/itsdangerous && chmod -R 755 /var/log/itsdangerous
+RUN chown -R app:apps /tmp/artifacts && chmod -R 755 /tmp/artifacts
+USER app
+ENTRYPOINT ["/bin/sh", "/scripts/start_all.sh"]