rest of the images

RocketChat · Dec 23, 2024 · 6292926 · 6292926
1 parent a13a5af
commit 6292926
Show file tree

Hide file tree

Showing 7 changed files with 69 additions and 7 deletions.
diff --git a/ee/apps/account-service/Dockerfile b/ee/apps/account-service/Dockerfile
@@ -75,7 +75,15 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458
 

diff --git a/ee/apps/authorization-service/Dockerfile b/ee/apps/authorization-service/Dockerfile
@@ -72,7 +72,16 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk del build-dependencies && \
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458
 

diff --git a/ee/apps/ddp-streamer/Dockerfile b/ee/apps/ddp-streamer/Dockerfile
@@ -78,7 +78,16 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk del build-dependencies && \
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458
 

diff --git a/ee/apps/omnichannel-transcript/Dockerfile b/ee/apps/omnichannel-transcript/Dockerfile
@@ -81,7 +81,16 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk del build-dependencies && \
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458
 

diff --git a/ee/apps/presence-service/Dockerfile b/ee/apps/presence-service/Dockerfile
@@ -75,7 +75,16 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk del build-dependencies && \
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458
 

diff --git a/ee/apps/queue-worker/Dockerfile b/ee/apps/queue-worker/Dockerfile
@@ -81,7 +81,16 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk del build-dependencies && \
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458
 

diff --git a/ee/apps/stream-hub-service/Dockerfile b/ee/apps/stream-hub-service/Dockerfile
@@ -72,7 +72,16 @@ RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
-    apk del build-dependencies
+    apk del build-dependencies && \
+    apk add --no-cache --virtual .usermod shadow && \
+    groupmod -n rocketchat nogroup && \
+    useradd -u 65533 -r -g rocketchat rocketchat && \
+    apk del .usermod && \
+    apk del build-dependencies && \
+    cd /app && \
+    chown -R rocketchat:rocketchat *
+
+USER rocketchat
 
 EXPOSE 3000 9458