bughz/glider
1
0
Fork 0
mirror of https://github.com/nadoo/glider.git synced 2025-04-22 04:02:07 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Support for non-root container

Browse Source 
Added glider user and group to final image. Support for running Glider container as non-root user. Build image is now pinned to Golang 1.16 to avoid future issues when 1.17 is released.
This commit is contained in:
Juan Calderon-Perez 2021-04-20 21:17:53 -04:00 committed by GitHub
parent f4cbf94d55
commit 67c3ee47e4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 21 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
Dockerfile
View File

@ -1,13 +1,25 @@
# build stage # Build Stage
FROM golang:alpine AS build-env FROM golang:1.16-alpine AS build-env
RUN apk --no-cache add build-base git gcc
ADD . /src
RUN cd /src && go build -v -ldflags "-s -w"
# final stage ADD . /src
RUN apk --no-cache add build-base git gcc \
&& cd /src && go build -v -ldflags "-s -w"
# Final Stage
FROM alpine FROM alpine
RUN apk -U upgrade --no-cache && \
apk add --no-cache bind-tools ca-certificates
WORKDIR /app
COPY --from=build-env /src/glider /app/ COPY --from=build-env /src/glider /app/
RUN apk -U upgrade \
&& apk add bind-tools ca-certificates shadow \
&& groupadd -g 1000 glider \
&& useradd -r -u 1000 -g glider glider \
&& apk del shadow \
&& chown -R glider:glider /app
&& apk -v cache clean
WORKDIR /app
USER glider
ENTRYPOINT ["./glider"] ENTRYPOINT ["./glider"]