Code Review
/
portal.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
| inline |
side by side
Migrate Dockerfile.sdk to unprivileged user
[portal.git]
/
deliveries
/
Dockerfile.sdk
diff --git
a/deliveries/Dockerfile.sdk
b/deliveries/Dockerfile.sdk
index
5f96aaa
..
4757d8a
100644
(file)
--- a/
deliveries/Dockerfile.sdk
+++ b/
deliveries/Dockerfile.sdk
@@
-38,6
+38,10
@@
RUN cd ${SDKCONTEXT} && unzip -q *.war && rm *.war
VOLUME ${TOMCATHOME}/logs
+# Switch to unprivileged user
+RUN addgroup -g 1000 -S portal && adduser -u 1000 -S portal -G portal
+USER portal
+
# Switch back to root
WORKDIR /