portal-ng pods run under root user 56/137456/1
authorFiete Ostkamp <Fiete.Ostkamp@telekom.de>
Fri, 1 Mar 2024 11:54:20 +0000 (12:54 +0100)
committerFiete Ostkamp <Fiete.Ostkamp@telekom.de>
Fri, 1 Mar 2024 11:54:20 +0000 (12:54 +0100)
- use non-root 'nobody' user

Issue-ID: PORTALNG-67
Change-Id: I9f5c90b1dc51565630309ce4f55fc7cfe8840145
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
Dockerfile

index e52fa2b..6b0da69 100644 (file)
@@ -5,6 +5,7 @@ WORKDIR /bff
 RUN ./gradlew assemble
 
 FROM eclipse-temurin:17-jre-alpine
+USER nobody
 ARG JAR_FILE=/bff/app/build/libs/app.jar
 COPY --from=builder ${JAR_FILE} app.jar
 EXPOSE 9080