From 1c55277edfa3353a5de917cf93f267c9b842eae8 Mon Sep 17 00:00:00 2001
From: Pierre-Olivier Mercier <nemunaire@nemunai.re>
Date: Thu, 6 Jan 2022 11:07:57 +0100
Subject: [PATCH] Run container as user

---
 .drone.yml |  2 +-
 Dockerfile | 10 ++++++----
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/.drone.yml b/.drone.yml
index d9ed232..5d696cd 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -9,7 +9,7 @@ platform:
 
 steps:
   - name: build
-    image: golang:latest
+    image: golang:1
     commands:
       - apt-get update && apt-get install -y build-essential git go-bindata
       - go generate -v
diff --git a/Dockerfile b/Dockerfile
index b65e0a5..c860c56 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:latest as gobuild
+FROM golang:1 as gobuild
 
 RUN apt-get update && \
     apt-get install -y build-essential git go-bindata
@@ -7,9 +7,9 @@ WORKDIR /go/src/git.nemunai.re/chldapasswd
 
 ADD . .
 
-RUN go generate -v
-RUN go get -d -v
-RUN go build -v
+RUN go generate -v && \
+    go get -d -v && \
+    go build -v
 
 
 FROM debian:stable-slim
@@ -20,6 +20,8 @@ RUN apt-get update && \
 
 EXPOSE 8080
 
+USER nobody
+
 WORKDIR /srv
 
 ENTRYPOINT ["/srv/chldapasswd", "-bind=:8080"]