Run as non-root alinmear#10

alinmear#10
JJTC-Containers · Mar 29, 2019 · 757f4c8 · 757f4c8
1 parent 93c9c55
commit 757f4c8
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/src/Dockerfile b/src/Dockerfile
@@ -28,8 +28,15 @@ RUN ln -snf /usr/share/zoneinfo/$TIMEZONE /etc/localtime \
     && echo $TIMEZONE > /etc/timezone \
     && chmod +x /entrypoint.sh \
     && cd /usr/bin/ \
-    && chmod +x conanexiles_controller rconcli steamcmd_setup
-
+    && chmod +x conanexiles_controller rconcli steamcmd_setup \
+    # Create steam user and group
+    && adduser --group --no-create-home --gecos "" steam \
+    # Ensure steam user got permission
+    && mkdir /conanexiles /steamcmd /wine \
+    && chown steam /conanexiles /steamcmd /wine
+
+USER steam
+
 EXPOSE 7777/udp 27015/udp 27016/udp 37015/udp 37016/udp
 
 VOLUME ["/conanexiles"]