Creating and using non-root user

navikt · May 28, 2024 · 2034a4b · 2034a4b
1 parent 6476410
commit 2034a4b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,7 @@
 FROM gcr.io/distroless/java21-debian12
 
+RUN groupadd -r --gid 1069 apprunner && useradd -r --uid 1069 -g apprunner apprunner
+
 WORKDIR /app
 
 COPY build/libs/app-*.jar app.jar
@@ -11,4 +13,8 @@ ENV DISABLE_PDF_GET="true"
 ENV ENABLE_HTML_ENDPOINT="false"
 
 EXPOSE 8080
+
+RUN chown -R apprunner /app
+USER apprunner
+
 CMD [ "app.jar" ]