feat(docker): run as non root user (#1380)

elk-zone · Jan 22, 2023 · 331f517 · 331f517
1 parent 745e57f
commit 331f517
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -29,6 +29,16 @@ RUN pnpm build
 
 FROM base AS runner
 
+ARG UID=911
+ARG GID=911
+
+# Create a dedicated user and group
+RUN set -eux; \
+    addgroup -g $UID elk; \
+    adduser -u $GID -D -G elk elk;
+
+USER elk
+
 ENV NODE_ENV=production
 
 COPY --from=builder /elk/.output ./.output