@@ -27,10 +27,10 @@ RUN <<-EOT
27
27
apt-get install -y curl tar apt-transport-https ca-certificates gnupg locales jq git gh
28
28
locale-gen en_US.UTF-8
29
29
groupadd --gid 1001 non-root-group
30
- useradd --uid 1001 --gid non-root-group -m non-root-group
31
- mkdir -p /home/non-root-group /.config
30
+ useradd --uid 1001 --gid non-root-group -m non-root-user
31
+ mkdir -p /home/non-root-user /.config
32
32
git config --system --add safe.directory '*'
33
- chown -R non-root-group :non-root-group /home/non-root-group /.config
33
+ chown -R non-root-user :non-root-group /home/non-root-user /.config
34
34
apt-get clean
35
35
rm -rf /var/lib/apt/lists/*
36
36
EOT
@@ -69,9 +69,9 @@ RUN <<-EOT
69
69
/usr/lib/jvm/graalvm*/lib/installer
70
70
EOT
71
71
72
- # Switch to non-root group during runtime for security
73
- USER non-root-group
74
- WORKDIR /home/non-root-group
72
+ # Switch to non-root user during runtime for security
73
+ USER non-root-user
74
+ WORKDIR /home/non-root-user
75
75
76
76
FROM scratch AS default-jdk
77
77
@@ -94,10 +94,10 @@ RUN <<-EOT
94
94
socat less debian-goodies autossh ca-certificates-java python3-pip locales jq git gh
95
95
locale-gen en_US.UTF-8
96
96
groupadd --gid 1001 non-root-group
97
- useradd --uid 1001 --gid non-root-group -m non-root-group
98
- mkdir -p /home/non-root-group /.config
97
+ useradd --uid 1001 --gid non-root-group -m non-root-user
98
+ mkdir -p /home/non-root-user /.config
99
99
git config --system --add safe.directory '*'
100
- chown -R non-root-group :non-root-group /home/non-root-group /.config
100
+ chown -R non-root-user :non-root-group /home/non-root-user /.config
101
101
apt-get clean
102
102
rm -rf /var/lib/apt/lists/*
103
103
mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/bin
@@ -139,9 +139,9 @@ RUN <<-EOT
139
139
rm -rf /var/lib/apt/lists/*
140
140
EOT
141
141
142
- # Switch to non-root group during runtime for security
143
- USER non-root-group
144
- WORKDIR /home/non-root-group
142
+ # Switch to non-root user during runtime for security
143
+ USER non-root-user
144
+ WORKDIR /home/non-root-user
145
145
146
146
# IBM specific env variables
147
147
ENV IBM_JAVA_OPTIONS="-XX:+UseContainerSupport"
@@ -167,9 +167,9 @@ COPY --from=all-jdk /usr/lib/jvm/${VARIANT_LOWER} /usr/lib/jvm/${VARIANT_LOWER}
167
167
ENV JAVA_${VARIANT_UPPER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
168
168
ENV JAVA_${VARIANT_LOWER}_HOME=/usr/lib/jvm/${VARIANT_LOWER}
169
169
170
- # Switch to non-root group during runtime for security
171
- USER non-root-group
172
- WORKDIR /home/non-root-group
170
+ # Switch to non-root user during runtime for security
171
+ USER non-root-user
172
+ WORKDIR /home/non-root-user
173
173
174
174
# Full image for debugging, contains all JDKs.
175
175
FROM base AS full
@@ -186,9 +186,9 @@ COPY --from=all-jdk /usr/lib/jvm/ubuntu17 /usr/lib/jvm/ubuntu17
186
186
COPY --from=all-jdk /usr/lib/jvm/graalvm17 /usr/lib/jvm/graalvm17
187
187
COPY --from=all-jdk /usr/lib/jvm/graalvm21 /usr/lib/jvm/graalvm21
188
188
189
- # Switch to non-root group during runtime for security
190
- USER non-root-group
191
- WORKDIR /home/non-root-group
189
+ # Switch to non-root user during runtime for security
190
+ USER non-root-user
191
+ WORKDIR /home/non-root-user
192
192
193
193
ENV JAVA_7_HOME=/usr/lib/jvm/7
194
194
0 commit comments