Skip to content

Commit

Permalink
switch to not using root user
Browse files Browse the repository at this point in the history
Since it is not recommended to run docker services as root
we're switching to a newly created user `tinkerbell`.

Signed-off-by: Mike Mason <[email protected]>
  • Loading branch information
mikemrm committed Jan 7, 2021
1 parent e8f08dd commit 918fea6
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -10,4 +10,7 @@ EXPOSE 50061
ENTRYPOINT ["/usr/bin/hegel"]

RUN apk add --update --upgrade ca-certificates
RUN adduser -D -u 1000 tinkerbell
USER tinkerbell

COPY --from=0 /usr/myapp/bin/hegel /usr/bin/hegel

0 comments on commit 918fea6

Please sign in to comment.