From e5f4c486b5e81d17eb9338a8101f0745feb36d10 Mon Sep 17 00:00:00 2001 From: Jasper Date: Wed, 7 Jun 2023 17:22:48 -0700 Subject: [PATCH] Add nonroot user to arm dockerfile --- Dockerfile | 8 ++++---- Dockerfile.arm64 | 6 ++++-- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/Dockerfile b/Dockerfile index c100394..7f16197 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,11 +15,11 @@ RUN nimble build -d:danger -d:lto -d:strip \ FROM alpine:latest WORKDIR /src/ -RUN apk --no-cache add pcre ca-certificates +RUN apk --no-cache add pcre ca-certificates && \ + adduser -h /src/ -D -s /bin/sh nitter COPY --from=nim /src/nitter/nitter ./ -COPY --from=nim /src/nitter/nitter.example.conf ./nitter.conf +COPY --from=nim --chown=nitter:nitter /src/nitter/nitter.example.conf ./nitter.conf COPY --from=nim /src/nitter/public ./public EXPOSE 8080 -RUN adduser -h /src/ -D -s /bin/sh nitter USER nitter -CMD ./nitter +CMD ./nitter \ No newline at end of file diff --git a/Dockerfile.arm64 b/Dockerfile.arm64 index 6cd6744..c1859d5 100644 --- a/Dockerfile.arm64 +++ b/Dockerfile.arm64 @@ -15,9 +15,11 @@ RUN nimble build -d:danger -d:lto -d:strip \ FROM alpine:3.17 WORKDIR /src/ -RUN apk --no-cache add ca-certificates pcre openssl1.1-compat +RUN apk --no-cache add ca-certificates pcre openssl1.1-compat && \ + adduser -h /src/ -D -s /bin/sh nitter COPY --from=nim /src/nitter/nitter ./ -COPY --from=nim /src/nitter/nitter.example.conf ./nitter.conf +COPY --from=nim --chown=nitter:nitter /src/nitter/nitter.example.conf ./nitter.conf COPY --from=nim /src/nitter/public ./public EXPOSE 8080 +USER nitter CMD ./nitter