Skip to content

Commit 3f4e2b5

Browse files
committed
feat: Claudio image OpenShift compliant
Due to the security context to run claudio in an OpenShift cluster we need to adjust the USER and the rights on the folders to make it OpenShift compliant Signed-off-by: Adrian Riobo <ariobolo@redhat.com>
1 parent 8ff4d61 commit 3f4e2b5

1 file changed

Lines changed: 12 additions & 5 deletions

File tree

Containerfile

Lines changed: 12 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,12 +17,12 @@
1717

1818
FROM registry.access.redhat.com/ubi10/nodejs-22@sha256:f79613e29c1cc7ca8b5e98804f17088608a55ebc464fe5008eb923e5f64421a6
1919

20-
ARG TARGETARCH
2120

21+
ARG TARGETARCH
2222
USER root
23-
ENV HOME /root
2423

25-
RUN dnf install -y skopeo podman jq
24+
# Basic tools
25+
RUN dnf install -y skopeo podman jq
2626

2727
# Claude
2828
# https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
@@ -69,7 +69,14 @@ ENV K8S_MCP_V v0.0.52
6969

7070
# Conf
7171
COPY conf/ ${HOME}/
72+
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
73+
74+
# Setup non root user
75+
ENV HOME /home/default
76+
WORKDIR /home/default
77+
RUN chown -R default:0 ${HOME} && \
78+
chmod -R g=u ${HOME}
79+
USER default
7280

7381
# Entrypoint
74-
COPY entrypoint.sh /entrypoint.sh
75-
ENTRYPOINT ["/entrypoint.sh"]
82+
ENTRYPOINT ["entrypoint.sh"]

0 commit comments

Comments
 (0)