Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docker: Build and run as a non-privileged user #6053

Closed
wants to merge 1 commit into from

Conversation

heliocastro
Copy link
Contributor

  • Shell in login profile is not more needed
  • Container runs always on the defined build user ( default: ort )
  • Added an auxiliary script for apt proxy

Signed-off-by: Helio Chissini de Castro heliocastro@gmail.com

Please ensure that your pull request adheres to our contribution guidelines. Thank you!

@heliocastro heliocastro added enhancement Issues that are considered to be enhancements docker About Docker topics labels Nov 8, 2022
@heliocastro heliocastro requested a review from a team as a code owner November 8, 2022 16:30
@heliocastro heliocastro self-assigned this Nov 8, 2022
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
@heliocastro heliocastro force-pushed the hcc/docker_as_a_user branch 2 times, most recently from e3c01b6 to 3419189 Compare November 8, 2022 19:59
Dockerfile Show resolved Hide resolved
@nnobelis
Copy link
Member

nnobelis commented Nov 9, 2022

Could you please break the changes to the Dockerfile across several commits ? This is really hard to review.

Dockerfile Outdated Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
@heliocastro heliocastro force-pushed the hcc/docker_as_a_user branch 2 times, most recently from 1aa71f6 to f9804d8 Compare November 10, 2022 07:57
Dockerfile Show resolved Hide resolved
@heliocastro heliocastro force-pushed the hcc/docker_as_a_user branch 3 times, most recently from 892888c to c4b2bef Compare November 10, 2022 09:04
@heliocastro heliocastro marked this pull request as ready for review November 10, 2022 09:04
- Shell in login profile is not more needed
- Container runs always on the defined build user ( default: ort )
- Added an auxiliary script for apt proxy
- Detect platform for build. scancode is disabled on linux/arm64

Signed-off-by: Helio Chissini de Castro <heliocastro@gmail.com>
Dockerfile Show resolved Hide resolved
Dockerfile Show resolved Hide resolved
Copy link
Member

@nicorikken nicorikken left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I did a detailed review of the Dockerfile. I think the current setup is way better. Also hardcoded home dirs of the various tools will make it more predictable.

@sschuberth
Copy link
Member

I did a detailed review of the Dockerfile. I think the current setup is way better. Also hardcoded home dirs of the various tools will make it more predictable.

While the changes in sum may be good, it's still all done in one bulk commit. Please split this into logical steps / semantically atomic commits to separate independent changes from another like @nnobelis was already asking for above.

@heliocastro heliocastro marked this pull request as draft November 25, 2022 06:30
@heliocastro
Copy link
Contributor Author

Superseeded

@sschuberth sschuberth deleted the hcc/docker_as_a_user branch December 20, 2022 10:03
@sschuberth
Copy link
Member

Superseeded

Mind adding a link with what this is being superseded, for reference?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docker About Docker topics enhancement Issues that are considered to be enhancements
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants