run with non-root user 1001

This commit is contained in:
Harald Reinmueller (FG-4-I-1)
2020-02-07 10:46:08 +01:00
parent 4d0c07e9f0
commit efa9a63656

View File

@@ -17,6 +17,14 @@
FROM registry.access.redhat.com/ubi8/ubi-minimal:8.1 FROM registry.access.redhat.com/ubi8/ubi-minimal:8.1
WORKDIR /work/ WORKDIR /work/
COPY ${build_dir}/*-runner /work/application COPY ${build_dir}/*-runner /work/application
RUN chmod 775 /work /work/application
# set up permissions for user `1001`
RUN chmod 775 /work /work/application \
&& chown -R 1001 /work \
&& chmod -R "g+rwX" /work \
&& chown -R 1001:root /work
EXPOSE 8080 EXPOSE 8080
USER 1001
CMD ["./application", "-Dquarkus.http.host=0.0.0.0"] CMD ["./application", "-Dquarkus.http.host=0.0.0.0"]