Migrate Dockerfile.portal to unprivileged user

[portal.git] / deliveries / Dockerfile.portal

diff --git a/deliveries/Dockerfile.portal b/deliveries/Dockerfile.portal
index f12a3e3..cce3ed0 100644 (file)
--- a/deliveries/Dockerfile.portal
+++ b/deliveries/Dockerfile.portal
@@ -41,6 +41,10 @@ COPY ${FE_DIR} ${PORTALCONTEXT}/public
 
 VOLUME ${TOMCATHOME}/logs
 
+# Switch to unprivileged user
+RUN addgroup -g 1000 -S portal && adduser -u 1000 -S portal -G portal
+USER portal
+
 # Switch back to root
 WORKDIR /