run container as non root user

Signed-off-by: Robert Waffen <[email protected]>
voxpupuli · Aug 2, 2024 · adb970c · adb970c
1 parent 39a197d
commit adb970c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -60,5 +60,8 @@ RUN apk update \
 
 WORKDIR /repo
 
+RUN addgroup -S voxbox && adduser -S voxbox -G voxbox
+USER voxbox
+
 ENTRYPOINT [ "rake" ]
 CMD [ "-f", "/Rakefile", "-T" ]