projects
/
osm
/
devops.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Fix bug 1702 Adding non-root user to run NG-UI
[osm/devops.git]
/
docker
/
NG-UI
/
Dockerfile
diff --git
a/docker/NG-UI/Dockerfile
b/docker/NG-UI/Dockerfile
index
c4d67df
..
6e9e79d
100644
(file)
--- a/
docker/NG-UI/Dockerfile
+++ b/
docker/NG-UI/Dockerfile
@@
-65,6
+65,14
@@
RUN DEBIAN_FRONTEND=noninteractive apt-get --yes update && \
# Removing the Nginx default page.
RUN rm -rf /usr/share/nginx/html/*
# Removing the Nginx default page.
RUN rm -rf /usr/share/nginx/html/*
+# Creating the user for the app
+RUN groupadd -g 1000 appuser && \
+ useradd -u 1000 -g 1000 -d /usr appuser && \
+ chown -R appuser:appuser /usr /var/lib/nginx /var/log/nginx /etc/nginx /run
+
+# Changing the security context
+USER appuser
+
# Copying Nginx configuration
COPY --from=INSTALL /usr/share/osm-ngui/nginx/nginx.conf /etc/nginx/sites-available/default
# Copying Nginx configuration
COPY --from=INSTALL /usr/share/osm-ngui/nginx/nginx.conf /etc/nginx/sites-available/default