Run container as non-root user
Add USER 65534:65534 to the scratch runtime image so the checker process does not run as root.
This commit is contained in:
parent
c4bf833274
commit
8b38c43b8a
1 changed files with 1 additions and 0 deletions
|
|
@ -11,5 +11,6 @@ RUN CGO_ENABLED=0 go build -tags standalone -ldflags "-X main.Version=${CHECKER_
|
|||
FROM scratch
|
||||
COPY --from=builder /checker-autoconfig /checker-autoconfig
|
||||
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
||||
USER 65534:65534
|
||||
EXPOSE 8080
|
||||
ENTRYPOINT ["/checker-autoconfig"]
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue