fix: Front end no longer runs as root in the container.

Refs iris-connect/iris-backlog#224
iris-connect · Sep 2, 2021 · 543d67f · 543d67f
1 parent 98a4b30
commit 543d67f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/iris-client-fe/Dockerfile b/iris-client-fe/Dockerfile
@@ -28,5 +28,11 @@ RUN mv dist /usr/share/caddy
 # copy webserver configuration
 COPY ./Caddyfile /etc/caddy/Caddyfile
 
+# Create a group and user
+RUN addgroup --gid 9999 iris && adduser --disabled-password --gecos '' --uid 9999 -G iris -s /bin/ash iris
+COPY --chown=iris:iris ./autosave.json /config/caddy/autosave.json
+# Change to non-root privilege
+USER iris:iris
+
 # note: exposed port needs to match port in Caddyfile
-EXPOSE 28080
+EXPOSE 28080
diff --git a/iris-client-fe/autosave.json b/iris-client-fe/autosave.json
@@ -0,0 +1 @@
+