Run as a non-root user

polymerdao · May 28, 2024 · 6c2ff4f · 6c2ff4f
1 parent 133e6d5
commit 6c2ff4f
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -37,10 +37,15 @@ FROM alpine:edge
 
 # Install ca-certificates
 RUN apk add --update ca-certificates
-WORKDIR /home
 
 # Install bash
 RUN apk add --no-cache bash
 
+WORKDIR /home
+
+RUN addgroup -g 333 polymer && adduser -D -u 333 -G polymer polymer
+RUN chown -R polymer:polymer /home
+USER polymer
+
 # Copy over binaries from the build-env
 COPY --from=build-env /go/bin/juno /usr/bin/juno