Dockerfile: run daemon as unprivileged user

NoMore201 · Dec 6, 2018 · f3828fd · f3828fd
1 parent c3c9474
commit f3828fd
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -40,6 +40,12 @@ WORKDIR /opt/playmaker
 RUN pip3 install . && \
     cd /opt && rm -rf playmaker
 
+RUN groupadd -g 999 pmuser && \
+    useradd -m -u 999 -g pmuser pmuser
+RUN chown -R pmuser:pmuser /data/fdroid && \
+    chown -R pmuser:pmuser /opt/playmaker
+USER pmuser
+
 VOLUME /data/fdroid
 WORKDIR /data/fdroid