Browse Source

Enable non-root container build
Closes #308.

Lukas Frischknecht 3 years ago
parent
commit
acfa961cd7
2 changed files with 8 additions and 0 deletions
  1. 4 0
      .docker/Dockerfile
  2. 4 0
      .docker/Dockerfile.multiarch

+ 4 - 0
.docker/Dockerfile

@@ -22,8 +22,12 @@ COPY --from=builder /app /app
 
 WORKDIR /app
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 
+USER node
+
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password
 

+ 4 - 0
.docker/Dockerfile.multiarch

@@ -23,8 +23,12 @@ COPY --from=builder /app /app
 
 WORKDIR /app
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 
+USER node
+
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password