refactor Dockerfile to run lavamusic as non-root user

appujet · Apr 4, 2024 · 05d3fa1 · 05d3fa1
1 parent b7fb346
commit 05d3fa1
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -33,4 +33,14 @@ COPY --from=builder /opt/lavamusic/src/utils/LavaLogo.txt ./src/utils/LavaLogo.t
 COPY package*.json ./
 RUN npm install --only=production
 
+# Run as non-root user
+RUN addgroup --gid 322 --system lavamusic && \
+    adduser --uid 322 --system lavamusic
+
+# Change ownership of the folder
+RUN chown -R lavamusic:lavamusic /opt/lavamusic/
+
+# Switch to the appropriate user
+USER lavamusic
+
 CMD [ "node", "dist/index.js" ]