mirror of https://github.com/schollz/croc.git
Use unprivileged user in docker
See https://americanexpress.io/do-not-run-dockerized-applications-as-root/ and https://engineering.bitnami.com/articles/why-non-root-containers-are-important-for-security.html
This commit is contained in:
parent
5b0883e1fe
commit
968950f783
|
@ -11,5 +11,6 @@ EXPOSE 9011
|
||||||
EXPOSE 9012
|
EXPOSE 9012
|
||||||
EXPOSE 9013
|
EXPOSE 9013
|
||||||
COPY --from=builder /go/croc/croc /go/croc/croc-entrypoint.sh /
|
COPY --from=builder /go/croc/croc /go/croc/croc-entrypoint.sh /
|
||||||
|
USER nobody
|
||||||
ENTRYPOINT ["/croc-entrypoint.sh"]
|
ENTRYPOINT ["/croc-entrypoint.sh"]
|
||||||
CMD ["relay"]
|
CMD ["relay"]
|
||||||
|
|
Loading…
Reference in New Issue