Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

run scancodeio as non-root user in docker #399

Closed
aalexanderr opened this issue Feb 15, 2022 · 1 comment
Closed

run scancodeio as non-root user in docker #399

aalexanderr opened this issue Feb 15, 2022 · 1 comment

Comments

@aalexanderr
Copy link
Contributor

No description provided.

aalexanderr added a commit to aalexanderr/scancode.io that referenced this issue Feb 15, 2022
@aalexanderr
Docker: run as non-root user, use venv
07b6bde 
1. Run as non-elevated user by default
2. Install scancodeio in venv
3. Make it possible to set up UNAME/UID/GID on buildtime
4. Move scancodeio from /app to /opt to be more in-line with:
https://refspecs.linuxfoundation.org/FHS_3.0/fhs/index.html
5. Set cache to /tmp as it is disposable after build
6. Upgrade pip to have less red in build log

Resolves nexB#260
Resolves nexB#399

Signed-off-by: Alexander Mazuruk <a.mazuruk@samsung.com>
@aalexanderr aalexanderr mentioned this issue Feb 15, 2022
Closed
aalexanderr added a commit to aalexanderr/scancode.io that referenced this issue Feb 15, 2022
@aalexanderr
Docker: run as non-root user, use venv
55207b0 
1. Run as non-elevated user by default
2. Install scancodeio in venv
3. Make it possible to set up UNAME/UID/GID on buildtime
4. Move scancodeio from /app to /opt to be more in-line with:
https://refspecs.linuxfoundation.org/FHS_3.0/fhs/index.html
5. Set cache to /tmp as it is disposable after build
6. Upgrade pip to have less red in build log

Resolves nexB#260
Resolves nexB#399

Signed-off-by: Alexander Mazuruk <a.mazuruk@samsung.com>
aalexanderr added a commit to aalexanderr/scancode.io that referenced this issue Jun 29, 2022
@aalexanderr
Docker: run as non-root user, use venv
aab4d5c 
1. Run as non-elevated user by default
2. Install scancodeio in venv
3. Make it possible to set up UNAME/UID/GID on buildtime
4. Move scancodeio from /app to /opt to be more in-line with:
https://refspecs.linuxfoundation.org/FHS_3.0/fhs/index.html
5. Set cache to /tmp as it is disposable after build
6. Upgrade pip to have less red in build log

Resolves nexB#260
Resolves nexB#399

Signed-off-by: Alexander Mazuruk <a.mazuruk@samsung.com>
tdruez added a commit that referenced this issue Jul 26, 2023
@tdruez
Run Docker as non-root user using virtualenv #399
0b6ac4d 
Signed-off-by: Thomas Druez <tdruez@nexb.com>
tdruez added a commit that referenced this issue Jul 26, 2023
@tdruez
Refine the stages order to remove the need for long chown #399
da04f80 
Signed-off-by: Thomas Druez <tdruez@nexb.com>
tdruez added a commit that referenced this issue Jul 26, 2023
@tdruez @aalexanderr
Run Docker as non-root user using virtualenv #399 (#821)
afda178 
Signed-off-by: Thomas Druez <tdruez@nexb.com>
Co-authored-by: Alexander Mazuruk <a.mazuruk@samsung.com>
@tdruez
Copy link
Member

tdruez commented Jul 26, 2023

Implemented in #821

@tdruez tdruez closed this as completed Jul 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Docker: run as non-root user, use venv aalexanderr/scancode.io
2 participants
@tdruez @aalexanderr