Skip to content

Updated dockerfile to use non-root user #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sei-aschlackman merged 1 commit into from
Jun 18, 2025
Merged

Updated dockerfile to use non-root user #60

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .dockerignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# directories
**/bin/
**/obj/
**/out/

# files
Dockerfile*
**/*.md
appsettings.*.json
**/appsettings.*.json
72 changes: 40 additions & 32 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,32 +1,40 @@
#
#multi-stage target: dev
#
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS dev

ENV ASPNETCORE_URLS=http://*:5000
ENV ASPNETCORE_ENVIRONMENT=DEVELOPMENT

COPY . /app
WORKDIR /app/src/Caster.Api
RUN dotnet publish -c Release -o /app/dist
CMD [ "dotnet", "run" ]

#
#multi-stage target: prod
#
FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS prod
ARG commit
ENV COMMIT=$commit
ENV DOTNET_HOSTBUILDER__RELOADCONFIGCHANGE=false
COPY --from=dev /app/dist /app

WORKDIR /app
ENV ASPNETCORE_URLS=http://*:80
EXPOSE 80

CMD [ "dotnet", "Caster.Api.dll" ]

#Install git and set credential store
RUN apt-get update && \
apt-get install -y git jq curl && \
git config --global credential.helper store
# Adapted from https://github.com/dotnet/dotnet-docker/blob/main/samples/aspnetapp/Dockerfile.chiseled

# Build stage
FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:8.0 AS build
ARG TARGETARCH
WORKDIR /source

# Copy project files and restore as distinct layers
COPY --link src/Caster.Api/*.csproj ./src/Caster.Api/
WORKDIR /source/src/Caster.Api
RUN dotnet restore -a $TARGETARCH

# Copy source code and publish app
WORKDIR /source
COPY --link . .
WORKDIR /source/src/Caster.Api
RUN dotnet publish -a $TARGETARCH --no-restore -o /app

# Production Stage
FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS prod
ARG commit
ENV COMMIT=$commit
ENV DOTNET_HOSTBUILDER__RELOADCONFIGCHANGE=false

# This can be removed after switching to IHost builder
ENV ASPNETCORE_URLS=http://*:8080

EXPOSE 8080
WORKDIR /app
COPY --link --from=build /app .

# Install git and set credential store
RUN apt-get update && \
apt-get install -y git jq curl unzip wget && \
git config --global credential.helper store

USER $APP_UID
ENTRYPOINT ["./Caster.Api"]


Loading