Merge pull request #102 from jingyuanliang/master

Fix go-build-template update: iptables can't run as nobody
kubernetes-sigs · Feb 28, 2023 · 5768947 · 5768947
2 parents dd50226 + 3e2be03
commit 5768947
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.gitignore b/.gitignore
@@ -3,7 +3,7 @@
 /.push-*
 /.container-*
 /.dockerfile-*
-/.licenses
+/.licenses*
 /.buildx-initialized
 
 # Emacs save files

diff --git a/Dockerfile.in b/Dockerfile.in
@@ -32,8 +32,8 @@ ARG HASH_BINARY=0
 # Add the platform-specific binary.
 COPY bin/{ARG_OS}_{ARG_ARCH}/{ARG_BIN} /{ARG_BIN}
 
-# This would be nicer as `nobody:nobody` but distroless has no such entries.
-USER 65535:65535
+# This container has to run as root for iptables. Be explicit here.
+USER 0:0
 ENV HOME /
 
 ENTRYPOINT ["/{ARG_BIN}"]