happyDomain/checker-zonemaster
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Run container as non-root user

Browse source 
Add USER 65534:65534 to the scratch runtime image so the checker
process does not run as root.
This commit is contained in:
nemunaire 2026-04-26 01:10:32 +07:00
commit bf409ba33c
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Dockerfile
View file

@ -10,5 +10,6 @@ RUN CGO_ENABLED=0 go build -ldflags "-X main.Version=${CHECKER_VERSION}" -o /che
FROM scratch FROM scratch
COPY --from=builder /checker-zonemaster /checker-zonemaster COPY --from=builder /checker-zonemaster /checker-zonemaster
USER 65534:65534
EXPOSE 8080 EXPOSE 8080
ENTRYPOINT ["/checker-zonemaster"] ENTRYPOINT ["/checker-zonemaster"]