mirror of https://github.com/Lissy93/dashy.git
⏪️ Merge pull request #501 from Lissy93/revert-495-master
[REVERRT] Add group and user in dockerfile to run container as unprivileged Fixes: #499
This commit is contained in:
commit
f2c5de73bd
26
Dockerfile
26
Dockerfile
|
@ -30,32 +30,16 @@ FROM node:16.13.2-alpine
|
||||||
# Define some ENV Vars
|
# Define some ENV Vars
|
||||||
ENV PORT=80 \
|
ENV PORT=80 \
|
||||||
DIRECTORY=/app \
|
DIRECTORY=/app \
|
||||||
IS_DOCKER=true \
|
IS_DOCKER=true
|
||||||
USER=docker \
|
|
||||||
UID=12345 \
|
|
||||||
GID=23456
|
|
||||||
|
|
||||||
# Install tini for initialization and tzdata for setting timezone
|
|
||||||
RUN apk add --no-cache tzdata tini \
|
|
||||||
# Add group
|
|
||||||
&& addgroup --gid ${GID} "${USER}" \
|
|
||||||
# Add user
|
|
||||||
&& adduser \
|
|
||||||
--disabled-password \
|
|
||||||
--ingroup "${USER}" \
|
|
||||||
--gecos "" \
|
|
||||||
--home "${DIRECTORY}" \
|
|
||||||
--no-create-home \
|
|
||||||
--uid "$UID" \
|
|
||||||
"$USER"
|
|
||||||
|
|
||||||
USER ${USER}
|
|
||||||
|
|
||||||
# Create and set the working directory
|
# Create and set the working directory
|
||||||
WORKDIR ${DIRECTORY}
|
WORKDIR ${DIRECTORY}
|
||||||
|
|
||||||
|
# Install tini for initialization and tzdata for setting timezone
|
||||||
|
RUN apk add --no-cache tzdata tini
|
||||||
|
|
||||||
# Copy built application from build phase
|
# Copy built application from build phase
|
||||||
COPY --from=BUILD_IMAGE --chown=${USER}:${USER} /app ./
|
COPY --from=BUILD_IMAGE /app ./
|
||||||
|
|
||||||
# Finally, run start command to serve up the built application
|
# Finally, run start command to serve up the built application
|
||||||
ENTRYPOINT [ "/sbin/tini", "--" ]
|
ENTRYPOINT [ "/sbin/tini", "--" ]
|
||||||
|
|
Loading…
Reference in New Issue