chore: Added a fix to run the app as an unprivileged user

EYBlockchain · Dec 11, 2023 · 242eb77 · 242eb77
1 parent 7587c2e
commit 242eb77
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/merkle-tree/Dockerfile b/merkle-tree/Dockerfile
@@ -1,5 +1,10 @@
 FROM node:iron-slim
 
+ENV USERNAME="app"
+
+RUN addgroup --gid 10001 $USERNAME && \
+    adduser --gid 10001 --uid 10001 --home /app $USERNAME
+
 WORKDIR /app
 
 COPY ./package.json ./package-lock.json ./
@@ -8,5 +13,6 @@ COPY ./test ./test
 COPY ./.babelrc ./
 RUN npm install
 
+USER $USERNAME:$USERNAME
 EXPOSE 80
 CMD npm start