mirror of
https://github.com/nadoo/glider.git
synced 2025-02-23 01:15:41 +08:00
docker: Upgrade base alpine packages, run glider as non-root (#314)
This commit is contained in:
parent
c9c2ce995f
commit
1b972af52c
14
.Dockerfile
14
.Dockerfile
@ -23,7 +23,17 @@ RUN arch="$(apk --print-arch)"; \
|
||||
rm /dist -rf
|
||||
|
||||
FROM alpine
|
||||
RUN apk add --no-cache ca-certificates
|
||||
COPY --from=build-env /app /app
|
||||
|
||||
WORKDIR /app
|
||||
COPY --from=build-env /app /app
|
||||
|
||||
RUN apk -U upgrade --no-cache \
|
||||
&& apk --no-cache add ca-certificates shadow \
|
||||
&& groupadd -g 1000 glider \
|
||||
&& useradd -r -u 1000 -g glider glider \
|
||||
&& apk --no-cache del shadow \
|
||||
&& chown -R glider:glider /app \
|
||||
&& chmod +x /app/glider
|
||||
|
||||
USER glider
|
||||
ENTRYPOINT ["./glider"]
|
Loading…
Reference in New Issue
Block a user