Use nonroot version of distroless debian, run as nonroot user

hashicorp · Aug 11, 2023 · 35acafb · 35acafb
1 parent 9a7b77d
commit 35acafb
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -20,7 +20,7 @@ RUN apk add dumb-init
 
 # release-default release image
 # -----------------------------------
-FROM gcr.io/distroless/base-debian11 AS release-default
+FROM gcr.io/distroless/base-debian11:nonroot AS release-default
 
 ARG BIN_NAME
 ARG PRODUCT_VERSION
@@ -44,8 +44,6 @@ COPY --from=envoy-binary /usr/local/bin/envoy /usr/local/bin/
 COPY --from=dumb-init /usr/bin/dumb-init /usr/local/bin/
 COPY dist/$TARGETOS/$TARGETARCH/$BIN_NAME /usr/local/bin/
 
-USER 100
-
 ENTRYPOINT ["/usr/local/bin/dumb-init", "/usr/local/bin/consul-dataplane"]
 
 # Red Hat UBI-based image