瀏覽代碼

Enable non-root container build
Closes #308.

Lukas Frischknecht 3 年之前
父節點
當前提交
acfa961cd7
共有 2 個文件被更改,包括 8 次插入0 次删除
  1. 4 0
      .docker/Dockerfile
  2. 4 0
      .docker/Dockerfile.multiarch

+ 4 - 0
.docker/Dockerfile

@@ -22,8 +22,12 @@ COPY --from=builder /app /app
 
 
 WORKDIR /app
 WORKDIR /app
 
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 EXPOSE 5005
 
 
+USER node
+
 ENV NODE_ENV=production
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password
 ENV PASSWORD=flame_password
 
 

+ 4 - 0
.docker/Dockerfile.multiarch

@@ -23,8 +23,12 @@ COPY --from=builder /app /app
 
 
 WORKDIR /app
 WORKDIR /app
 
 
+RUN chown -R node:node .
+
 EXPOSE 5005
 EXPOSE 5005
 
 
+USER node
+
 ENV NODE_ENV=production
 ENV NODE_ENV=production
 ENV PASSWORD=flame_password
 ENV PASSWORD=flame_password