Merge pull request #531 from Sorridi/main

Refactor Dockerfile to run lavamusic as non-root user
appujet · Apr 6, 2024 · 59aba39 · 59aba39
2 parents 0c31b48 + 05d3fa1
commit 59aba39
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -33,4 +33,14 @@ COPY --from=builder /opt/lavamusic/src/utils/LavaLogo.txt ./src/utils/LavaLogo.t
 COPY package*.json ./
 RUN npm install --only=production
 
+# Run as non-root user
+RUN addgroup --gid 322 --system lavamusic && \
+    adduser --uid 322 --system lavamusic
+
+# Change ownership of the folder
+RUN chown -R lavamusic:lavamusic /opt/lavamusic/
+
+# Switch to the appropriate user
+USER lavamusic
+
 CMD [ "node", "dist/index.js" ]