Add image appuser (#1000)

* Adding appuser to run app
ONSdigital · Oct 21, 2024 · 8c81ba6 · 8c81ba6
1 parent d8afe77
commit 8c81ba6
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/_infra/docker/Dockerfile b/_infra/docker/Dockerfile
@@ -7,7 +7,11 @@ RUN pip install pipenv
 WORKDIR /app
 
 COPY . /app
+
+RUN groupadd -r appuser && useradd -r -g appuser -u 9000 appuser && chown -R appuser:appuser .
+RUN mkdir /home/appuser && chown appuser:appuser /home/appuser
 RUN pipenv install --deploy --system
 
-CMD ["gunicorn", "-b", "0.0.0.0:9000", "--workers", "4", "--timeout", "300", "frontstage:app"]
+USER appuser
 
+CMD ["gunicorn", "-b", "0.0.0.0:9000", "--workers", "4", "--timeout", "300", "frontstage:app"]
diff --git a/_infra/helm/frontstage/Chart.yaml b/_infra/helm/frontstage/Chart.yaml
@@ -14,8 +14,8 @@ type: application
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 2.5.27
+version: 2.5.28
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: 2.5.27
+appVersion: 2.5.28