Run container as non-root user
Add USER 65534:65534 to the scratch runtime image so the checker process does not run as root.
This commit is contained in:
parent
b1ebac2198
commit
394d7e8e4c
1 changed files with 1 additions and 0 deletions
|
|
@ -10,5 +10,6 @@ RUN CGO_ENABLED=0 go build -tags standalone -ldflags "-X main.Version=${CHECKER_
|
||||||
|
|
||||||
FROM scratch
|
FROM scratch
|
||||||
COPY --from=builder /checker-ping /checker-ping
|
COPY --from=builder /checker-ping /checker-ping
|
||||||
|
USER 65534:65534
|
||||||
EXPOSE 8080
|
EXPOSE 8080
|
||||||
ENTRYPOINT ["/checker-ping"]
|
ENTRYPOINT ["/checker-ping"]
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue