-
Notifications
You must be signed in to change notification settings - Fork 310
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docker: Build and run as a non-privileged user #6053
Conversation
ad228f8
to
efce22c
Compare
e3c01b6
to
3419189
Compare
Could you please break the changes to the |
3419189
to
60caf66
Compare
60caf66
to
e9d06be
Compare
1aa71f6
to
f9804d8
Compare
892888c
to
c4b2bef
Compare
c4b2bef
to
ac1f179
Compare
- Shell in login profile is not more needed - Container runs always on the defined build user ( default: ort ) - Added an auxiliary script for apt proxy - Detect platform for build. scancode is disabled on linux/arm64 Signed-off-by: Helio Chissini de Castro <heliocastro@gmail.com>
ac1f179
to
e83c6fe
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I did a detailed review of the Dockerfile. I think the current setup is way better. Also hardcoded home dirs of the various tools will make it more predictable.
While the changes in sum may be good, it's still all done in one bulk commit. Please split this into logical steps / semantically atomic commits to separate independent changes from another like @nnobelis was already asking for above. |
Superseeded |
Mind adding a link with what this is being superseded, for reference? |
Signed-off-by: Helio Chissini de Castro heliocastro@gmail.com
Please ensure that your pull request adheres to our contribution guidelines. Thank you!