Skip to content

Commit

Permalink
Run as root
Browse files Browse the repository at this point in the history
De-elevating causes too many permissioning issues with the amount of
volumes passed in. Given this is built to run on peoples desktops, and
not in any prod like environment, this shouldn't be too big a deal.
  • Loading branch information
adamgibbins committed Feb 18, 2020
1 parent 5bfe1bd commit 554abf9
Showing 1 changed file with 2 additions and 5 deletions.
7 changes: 2 additions & 5 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -25,14 +25,11 @@ LABEL org.opencontainers.image.title="Stackbuilder" \
ADD https://storage.googleapis.com/kubernetes-release/release/v${kubectl_version}/bin/linux/amd64/kubectl /usr/local/bin/kubectl

RUN chmod +x /usr/local/bin/kubectl && \
addgroup -S stacks && \
adduser -S stacks -G stacks && \
apk add --no-cache git

USER stacks
WORKDIR /home/stacks
WORKDIR /root

COPY --from=build /build /home/stacks
COPY --from=build /build /root
COPY --from=build /usr/local/bundle /usr/local/bundle

COPY bin /usr/local/bin/
Expand Down

0 comments on commit 554abf9

Please sign in to comment.