From 58fd11ef4bee7b5e4a43d9800dadb7bd60a3063f Mon Sep 17 00:00:00 2001 From: Jeremy McCormick Date: Mon, 30 Sep 2024 16:03:43 -0500 Subject: [PATCH] WIP: Run ppdb-replication as non-root user --- docker/Dockerfile.replication | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docker/Dockerfile.replication b/docker/Dockerfile.replication index 4ed27c8..1394ffa 100644 --- a/docker/Dockerfile.replication +++ b/docker/Dockerfile.replication @@ -38,10 +38,10 @@ RUN chmod +x /app/entrypoint-replication.sh RUN rm -rf /build # Create an application group and user so we don't run as root. -# RUN groupadd -g 1000 appgroup && \ -# useradd -ms /bin/bash -u 1000 -g 1000 appuser && \ -# chown -R appuser:appgroup /app -# USER appuser +RUN groupadd -g 1000 appgroup && \ + useradd -ms /bin/bash -u 1000 -g 1000 appuser && \ + chown -R appuser:appgroup /app +USER appuser # ENTRYPOINT ["/app/entrypoint-replication.sh"] CMD ["/app/entrypoint-replication.sh"]