fix: improve runuser
This commit is contained in:
+7
-4
@@ -26,13 +26,16 @@ COPY --from=builder /usr/share/vnc-avatar /usr/share/vnc-avatar
|
||||
COPY --from=builder /var/opt/out /var/opt/out
|
||||
|
||||
|
||||
RUN addgroup -S nginxuser && adduser -S nginxuser -G nginxuser
|
||||
RUN RUN addgroup -g 1001 vnc && adduser -D -u 1001 -S -G vnc vnc
|
||||
# Set up necessary directories with correct permissions for the non-root user
|
||||
RUN mkdir -p /var/lib/nginx/tmp /var/log/nginx /var/www/html /etc/nginx/sites-enabled && \
|
||||
chown -R nginxuser:nginxuser /var/lib/nginx /var/log/nginx /var/www/html /etc/nginx/sites-enabled && \
|
||||
chown -R vnc:vnc /var/lib/nginx /var/log/nginx /var/www/html /etc/nginx/sites-enabled && \
|
||||
chmod -R 755 /var/lib/nginx /var/log/nginx /var/www/html && \
|
||||
chown nginxuser:nginxuser /var/opt/out
|
||||
chown vnc:vnc /var/opt/out
|
||||
|
||||
USER nginxuser
|
||||
RUN mkdir -p /run/nginx/ && chown vnc:vnc /run/nginx/
|
||||
|
||||
|
||||
USER vnc
|
||||
|
||||
ENTRYPOINT ["node", "/usr/share/vnc-avatar/app/app.js"]
|
||||
|
||||
Reference in New Issue
Block a user