Non-root user docker image for Loki. (#1706)

Signed-off-by: Cyril Tovena <cyril.tovena@gmail.com>
grafana · Mar 17, 2020 · 45b51ef · 45b51ef
1 parent 3abee78
commit 45b51ef
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cmd/loki/Dockerfile b/cmd/loki/Dockerfile
@@ -8,6 +8,9 @@ RUN make clean && (if [ "${TOUCH_PROTOS}" ]; then make touch-protos; fi) && make
 
 FROM alpine:3.9
 RUN apk add --update --no-cache ca-certificates
+RUN addgroup -g 1000 -S loki && \
+    adduser -u 1000 -S loki -G loki
+USER loki
 COPY --from=build /src/loki/cmd/loki/loki /usr/bin/loki
 COPY cmd/loki/loki-local-config.yaml /etc/loki/local-config.yaml
 EXPOSE 80