feat(non-root): updates dockerfile to add non-root user: projects

meglkts · meglkts · commit 93f668bd761c · 2019-05-24T11:22:14.000-05:00
diff --git a/Dockerfile b/Dockerfile
@@ -1,12 +1,16 @@
 FROM maven:3.6-jdk-8-slim
 
-ENV APP_DIR /src/app/
+WORKDIR /src/app/
 
-RUN mkdir -p $APP_DIR
+COPY ./pom.xml .
 
-COPY ./pom.xml ${APP_DIR}
+RUN ["mkdir", "/home/projects"]
 
-WORKDIR ${APP_DIR}
+RUN groupadd projects && useradd -g projects projects && \
+  chown -R projects:projects /src/app && \
+  chown -R projects:projects /home/projects
+
+USER projects
 
 RUN ["mvn", "clean"]
 
@@ -15,3 +19,4 @@ RUN ["mvn", "de.qaware.maven:go-offline-maven-plugin:resolve-dependencies", "-P"
 COPY . .
 
 ENTRYPOINT ["sh"]
+
