Use non-root user in Dockerfile

Signed-off-by: Yash Ajgaonkar <[email protected]>
kubeslice · Apr 25, 2024 · a5f8d06 · a5f8d06
1 parent 015baa7
commit a5f8d06
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -44,14 +44,19 @@ RUN go mod download &&\
 
 FROM ${PLATFORM}/alpine:3.15
 
-# tc - is needed for traffic control and shaping on the sidecar.  it is part of the iproute2
+# Creating a non-root user
+RUN adduser -D myuser
 
+# tc - is needed for traffic control and shaping on the sidecar.  it is part of the iproute2
+# Install necessary packages
 RUN apk add --no-cache ca-certificates \
     iproute2
 
-# Copy our static executable.
+# Switching to the non-root user
+USER myuser
 
-COPY --from=gobuilder bin/kubeslice-gw-sidecar .
+# Copy our static executable.
+COPY --from=gobuilder --chown=myuser:myuser bin/kubeslice-gw-sidecar .
 
 EXPOSE 5000