Docker as non-root user

didx-xyz · Nov 7, 2023 · 6a34b51 · 6a34b51
1 parent 176839b
commit 6a34b51
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,9 +1,13 @@
 FROM eclipse-temurin:21
 
-WORKDIR /app
-COPY ./target/dawn-patrol ./dawn-patrol
-
 ENV HF_API_KEY=
 ENV OPENAI_TOKEN=
 
+RUN adduser --system --group --uid 1000 --shell /bin/bash dawn
+
+WORKDIR /app
+COPY --chown=0:0 ./target/dawn-patrol ./dawn-patrol
+
+USER dawn
+
 ENTRYPOINT [ "/app/dawn-patrol" ]