Skip to content

Commit da5e893

Browse files
committed
Fix non-root-ser
1 parent 5f2042d commit da5e893

File tree

1 file changed

+18
-18
lines changed

1 file changed

+18
-18
lines changed

Dockerfile

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -27,10 +27,10 @@ RUN <<-EOT
2727
apt-get install -y curl tar apt-transport-https ca-certificates gnupg locales jq git gh
2828
locale-gen en_US.UTF-8
2929
groupadd --gid 1001 non-root-group
30-
useradd --uid 1001 --gid non-root-group -m non-root-group
31-
mkdir -p /home/non-root-group/.config
30+
useradd --uid 1001 --gid non-root-group -m non-root-user
31+
mkdir -p /home/non-root-user/.config
3232
git config --system --add safe.directory '*'
33-
chown -R non-root-group:non-root-group /home/non-root-group/.config
33+
chown -R non-root-user:non-root-group /home/non-root-user/.config
3434
apt-get clean
3535
rm -rf /var/lib/apt/lists/*
3636
EOT
@@ -69,9 +69,9 @@ RUN <<-EOT
6969
/usr/lib/jvm/graalvm*/lib/installer
7070
EOT
7171

72-
# Switch to non-root group during runtime for security
73-
USER non-root-group
74-
WORKDIR /home/non-root-group
72+
# Switch to non-root user during runtime for security
73+
USER non-root-user
74+
WORKDIR /home/non-root-user
7575

7676
FROM scratch AS default-jdk
7777

@@ -94,10 +94,10 @@ RUN <<-EOT
9494
socat less debian-goodies autossh ca-certificates-java python3-pip locales jq git gh
9595
locale-gen en_US.UTF-8
9696
groupadd --gid 1001 non-root-group
97-
useradd --uid 1001 --gid non-root-group -m non-root-group
98-
mkdir -p /home/non-root-group/.config
97+
useradd --uid 1001 --gid non-root-group -m non-root-user
98+
mkdir -p /home/non-root-user/.config
9999
git config --system --add safe.directory '*'
100-
chown -R non-root-group:non-root-group /home/non-root-group/.config
100+
chown -R non-root-user:non-root-group /home/non-root-user/.config
101101
apt-get clean
102102
rm -rf /var/lib/apt/lists/*
103103
mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/bin
@@ -139,9 +139,9 @@ RUN <<-EOT
139139
rm -rf /var/lib/apt/lists/*
140140
EOT
141141

142-
# Switch to non-root group during runtime for security
143-
USER non-root-group
144-
WORKDIR /home/non-root-group
142+
# Switch to non-root user during runtime for security
143+
USER non-root-user
144+
WORKDIR /home/non-root-user
145145

146146
# IBM specific env variables
147147
ENV IBM_JAVA_OPTIONS="-XX:+UseContainerSupport"
@@ -167,9 +167,9 @@ COPY --from=all-jdk /usr/lib/jvm/${VARIANT_LOWER} /usr/lib/jvm/${VARIANT_LOWER}
167167
ENV JAVA_${VARIANT_UPPER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
168168
ENV JAVA_${VARIANT_LOWER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
169169

170-
# Switch to non-root group during runtime for security
171-
USER non-root-group
172-
WORKDIR /home/non-root-group
170+
# Switch to non-root user during runtime for security
171+
USER non-root-user
172+
WORKDIR /home/non-root-user
173173

174174
# Full image for debugging, contains all JDKs.
175175
FROM base AS full
@@ -186,9 +186,9 @@ COPY --from=all-jdk /usr/lib/jvm/ubuntu17 /usr/lib/jvm/ubuntu17
186186
COPY --from=all-jdk /usr/lib/jvm/graalvm17 /usr/lib/jvm/graalvm17
187187
COPY --from=all-jdk /usr/lib/jvm/graalvm21 /usr/lib/jvm/graalvm21
188188

189-
# Switch to non-root group during runtime for security
190-
USER non-root-group
191-
WORKDIR /home/non-root-group
189+
# Switch to non-root user during runtime for security
190+
USER non-root-user
191+
WORKDIR /home/non-root-user
192192

193193
ENV JAVA_7_HOME=/usr/lib/jvm/7
194194

0 commit comments

Comments
 (0)