Merge pull request quarkusio#7064 from haraldatbmw/master

Dockerfile.native - run with non-root user 1001
maniacs-sfa · Feb 17, 2020 · f4270f8 · f4270f8
2 parents 4ce58c9 + efa9a63
commit f4270f8
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/devtools/platform-descriptor-json/src/main/resources/templates/dockerfile-native.ftl b/devtools/platform-descriptor-json/src/main/resources/templates/dockerfile-native.ftl
@@ -17,6 +17,14 @@
 FROM registry.access.redhat.com/ubi8/ubi-minimal:8.1
 WORKDIR /work/
 COPY ${build_dir}/*-runner /work/application
-RUN chmod 775 /work /work/application
+
+# set up permissions for user `1001`
+RUN chmod 775 /work /work/application \
+  && chown -R 1001 /work \
+  && chmod -R "g+rwX" /work \
+  && chown -R 1001:root /work
+
 EXPOSE 8080
+USER 1001
+
 CMD ["./application", "-Dquarkus.http.host=0.0.0.0"]