mirror of
https://github.com/nadoo/glider.git
synced 2025-02-23 01:15:41 +08:00
docker: Upgrade base alpine packages, run glider as non-root (#314)
This commit is contained in:
parent
c9c2ce995f
commit
1b972af52c
16
.Dockerfile
16
.Dockerfile
@ -23,7 +23,17 @@ RUN arch="$(apk --print-arch)"; \
|
|||||||
rm /dist -rf
|
rm /dist -rf
|
||||||
|
|
||||||
FROM alpine
|
FROM alpine
|
||||||
RUN apk add --no-cache ca-certificates
|
|
||||||
COPY --from=build-env /app /app
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
ENTRYPOINT ["./glider"]
|
COPY --from=build-env /app /app
|
||||||
|
|
||||||
|
RUN apk -U upgrade --no-cache \
|
||||||
|
&& apk --no-cache add ca-certificates shadow \
|
||||||
|
&& groupadd -g 1000 glider \
|
||||||
|
&& useradd -r -u 1000 -g glider glider \
|
||||||
|
&& apk --no-cache del shadow \
|
||||||
|
&& chown -R glider:glider /app \
|
||||||
|
&& chmod +x /app/glider
|
||||||
|
|
||||||
|
USER glider
|
||||||
|
ENTRYPOINT ["./glider"]
|
||||||
|
Loading…
Reference in New Issue
Block a user