Skip to content
This repository was archived by the owner on Mar 23, 2025. It is now read-only.

Commit 5f19951

Browse files
committed
Add non-root user to Dockerfiles
Add the mango user and specify in Dockerfiles.
1 parent 883e01b commit 5f19951

File tree

3 files changed

+17
-2
lines changed

3 files changed

+17
-2
lines changed

Dockerfile

+5-1
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,12 @@ RUN make static || make static
88

99
FROM library/alpine
1010

11-
WORKDIR /
11+
WORKDIR /app
12+
13+
RUN adduser -D --home /app -u 1000 mango
1214

1315
COPY --from=builder /Mango/mango /usr/local/bin/mango
1416

17+
USER 1000:1000
18+
1519
CMD ["/usr/local/bin/mango"]

Dockerfile.arm32v7

+6-1
Original file line numberDiff line numberDiff line change
@@ -11,5 +11,10 @@ COPY mango-arm32v7.o .
1111

1212
RUN cc 'mango-arm32v7.o' -o '/usr/local/bin/mango' -rdynamic -lxml2 -L/image_size.cr/ext/libwebp -lwebp -L/image_size.cr/ext/stbi -lstbi /myhtml/src/ext/modest-c/lib/libmodest_static.a -L/duktape.cr/src/.build/lib -L/duktape.cr/src/.build/include -lduktape -lm `pkg-config libarchive --libs` -lz `command -v pkg-config > /dev/null && pkg-config --libs --silence-errors libssl || printf %s '-lssl -lcrypto'` `command -v pkg-config > /dev/null && pkg-config --libs --silence-errors libcrypto || printf %s '-lcrypto'` -lgmp -lsqlite3 -lyaml -lpcre -lm /usr/lib/arm-linux-gnueabihf/libgc.so -lpthread /crystal/src/ext/libcrystal.a -levent -lrt -ldl -L/usr/bin/../lib/crystal/lib -L/usr/bin/../lib/crystal/lib
1313

14-
CMD ["/usr/local/bin/mango"]
14+
RUN useradd --home-dir /app -u 1000 mango
15+
16+
WORKDIR /app
1517

18+
USER 1000:1000
19+
20+
CMD ["/usr/local/bin/mango"]

Dockerfile.arm64v8

+6
Original file line numberDiff line numberDiff line change
@@ -11,4 +11,10 @@ COPY mango-arm64v8.o .
1111

1212
RUN cc 'mango-arm64v8.o' -o '/usr/local/bin/mango' -rdynamic -lxml2 -L/image_size.cr/ext/libwebp -lwebp -L/image_size.cr/ext/stbi -lstbi /myhtml/src/ext/modest-c/lib/libmodest_static.a -L/duktape.cr/src/.build/lib -L/duktape.cr/src/.build/include -lduktape -lm `pkg-config libarchive --libs` -lz `command -v pkg-config > /dev/null && pkg-config --libs --silence-errors libssl || printf %s '-lssl -lcrypto'` `command -v pkg-config > /dev/null && pkg-config --libs --silence-errors libcrypto || printf %s '-lcrypto'` -lgmp -lsqlite3 -lyaml -lpcre -lm /usr/lib/aarch64-linux-gnu/libgc.so -lpthread /crystal/src/ext/libcrystal.a -levent -lrt -ldl -L/usr/bin/../lib/crystal/lib -L/usr/bin/../lib/crystal/lib
1313

14+
RUN useradd --home-dir /app -u 1000 mango
15+
16+
WORKDIR /app
17+
18+
USER 1000:1000
19+
1420
CMD ["/usr/local/bin/mango"]

0 commit comments

Comments
 (0)