Use user in container instead of root
This commit is contained in:
parent
f5ced6a851
commit
14b4bafa25
@ -62,8 +62,14 @@ workspace:
|
|||||||
path: /work
|
path: /work
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
|
- name: apply permissions
|
||||||
|
image: registry.nemunai.re/atsebay.t-worker
|
||||||
|
commands:
|
||||||
|
- chown 1000:1000 /work
|
||||||
|
|
||||||
- name: extract submission
|
- name: extract submission
|
||||||
image: registry.nemunai.re/atsebay.t-worker
|
image: registry.nemunai.re/atsebay.t-worker
|
||||||
|
user: 1000
|
||||||
environment:
|
environment:
|
||||||
SSH_PRIVATE_KEY:
|
SSH_PRIVATE_KEY:
|
||||||
from_secret: SSH_PRIVATE_KEY
|
from_secret: SSH_PRIVATE_KEY
|
||||||
|
@ -1,3 +1,4 @@
|
|||||||
FROM alpine:3.16
|
FROM alpine:3.16
|
||||||
|
|
||||||
RUN apk add --no-cache gawk git gnupg tar openssh-client-default xz
|
RUN apk add --no-cache gawk git gnupg tar openssh-client-default xz && \
|
||||||
|
adduser -h /work -D -u 1000 drone
|
||||||
|
Reference in New Issue
Block a user