From 64fdbb4e71ec90530d25bb7fd5cb78e6e333c344 Mon Sep 17 00:00:00 2001 From: germangarces Date: Mon, 5 Oct 2026 15:55:30 +0200 Subject: [PATCH] fix(cd): Run image as non-root Signed-off-by: germangarces --- Dockerfile | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index d8c97bc..2c19127 100644 --- a/Dockerfile +++ b/Dockerfile @@ -6,8 +6,8 @@ FROM rust:1-slim AS builder RUN apt-get update \ - && apt-get install -y --no-install-recommends cmake make perl pkg-config g++ libcurl4-openssl-dev \ - && rm -rf /var/lib/apt/lists/* + && apt-get install -y --no-install-recommends cmake make perl pkg-config g++ libcurl4-openssl-dev \ + && rm -rf /var/lib/apt/lists/* WORKDIR /app @@ -26,12 +26,15 @@ FROM debian:trixie-slim WORKDIR /app RUN apt-get update \ - && apt-get install -y --no-install-recommends ca-certificates \ - && rm -rf /var/lib/apt/lists/* + && apt-get install -y --no-install-recommends ca-certificates \ + && rm -rf /var/lib/apt/lists/* COPY --from=builder /app/target/release/flagsmith-analytics /usr/local/bin/flagsmith-analytics ENV LISTEN_ADDR=0.0.0.0:8080 EXPOSE 8080 +RUN useradd --system --uid 10001 --no-create-home app +USER 10001:10001 + ENTRYPOINT ["/usr/local/bin/flagsmith-analytics"]