docker: Upgrade base alpine packages, run glider as non-root (#314)

This commit is contained in:
Juan Calderon-Perez 2022-03-10 22:48:22 -05:00 committed by GitHub
parent c9c2ce995f
commit 1b972af52c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -23,7 +23,17 @@ RUN arch="$(apk --print-arch)"; \
rm /dist -rf
FROM alpine
RUN apk add --no-cache ca-certificates
COPY --from=build-env /app /app
WORKDIR /app
COPY --from=build-env /app /app
RUN apk -U upgrade --no-cache \
&& apk --no-cache add ca-certificates shadow \
&& groupadd -g 1000 glider \
&& useradd -r -u 1000 -g glider glider \
&& apk --no-cache del shadow \
&& chown -R glider:glider /app \
&& chmod +x /app/glider
USER glider
ENTRYPOINT ["./glider"]