WIP: Run ppdb-replication as non-root user

lsst · Sep 30, 2024 · 58fd11e · 58fd11e
1 parent c2d91a1
commit 58fd11e
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/docker/Dockerfile.replication b/docker/Dockerfile.replication
@@ -38,10 +38,10 @@ RUN chmod +x /app/entrypoint-replication.sh
 RUN rm -rf /build
 
 # Create an application group and user so we don't run as root.
-# RUN groupadd -g 1000 appgroup && \
-#    useradd -ms /bin/bash -u 1000 -g 1000 appuser && \
-#    chown -R appuser:appgroup /app
-# USER appuser
+RUN groupadd -g 1000 appgroup && \
+    useradd -ms /bin/bash -u 1000 -g 1000 appuser && \
+    chown -R appuser:appgroup /app
+USER appuser
 
 # ENTRYPOINT ["/app/entrypoint-replication.sh"]
 CMD ["/app/entrypoint-replication.sh"]