Fix bug 1702 Adding non-root user to run NG-UI

[osm/devops.git] / docker / NG-UI / Dockerfile

diff --git a/docker/NG-UI/Dockerfile b/docker/NG-UI/Dockerfile
index c4d67df..6e9e79d 100644 (file)
--- a/docker/NG-UI/Dockerfile
+++ b/docker/NG-UI/Dockerfile
@@ -65,6 +65,14 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get --yes update && \
 # Removing the Nginx default page.
 RUN rm -rf /usr/share/nginx/html/*
 
+# Creating the user for the app
+RUN groupadd -g 1000 appuser && \
+    useradd -u 1000 -g 1000 -d /usr appuser && \
+    chown -R appuser:appuser /usr /var/lib/nginx /var/log/nginx /etc/nginx /run
+
+# Changing the security context
+USER appuser
+
 # Copying Nginx configuration
 COPY --from=INSTALL /usr/share/osm-ngui/nginx/nginx.conf /etc/nginx/sites-available/default