Examples should run spies as non-root users #248 (#251)

grafana · Jun 22, 2021 · 0df4c1d · 0df4c1d
1 parent e756a20
commit 0df4c1d
Show file tree

Hide file tree

Showing 6 changed files with 25 additions and 0 deletions.
diff --git a/examples/dotnet/fast-slow/Dockerfile b/examples/dotnet/fast-slow/Dockerfile
@@ -10,4 +10,8 @@ RUN dotnet publish -o . -r $(dotnet --info | grep RID | cut -b 6- | tr -d ' ')
 ENV PYROSCOPE_APPLICATION_NAME=fast-slow.dotnet.app
 ENV PYROSCOPE_SERVER_ADDRESS=http://pyroscope:4040/
 ENV PYROSCOPE_LOG_LEVEL=debug
+
+RUN adduser --disabled-password --gecos --quiet pyroscope
+USER pyroscope
+
 CMD ["pyroscope", "exec", "-spy-name", "dotnetspy", "/dotnet/example"]
diff --git a/examples/dotnet/web/Dockerfile b/examples/dotnet/web/Dockerfile
@@ -10,4 +10,8 @@ RUN dotnet publish -o . -r $(dotnet --info | grep RID | cut -b 6- | tr -d ' ')
 ENV PYROSCOPE_APPLICATION_NAME=web.dotnet.app
 ENV PYROSCOPE_SERVER_ADDRESS=http://pyroscope:4040/
 ENV PYROSCOPE_LOG_LEVEL=debug
+
+RUN adduser --disabled-password --gecos --quiet pyroscope
+USER pyroscope
+
 CMD ["pyroscope", "exec", "dotnet", "/dotnet/example.dll"]
diff --git a/examples/golang/Dockerfile b/examples/golang/Dockerfile
@@ -6,4 +6,8 @@ COPY main.go ./main.go
 
 RUN go get -d ./
 RUN go build -o main .
+
+RUN adduser --disabled-password --gecos --quiet pyroscope
+USER pyroscope
+
 CMD ["./main"]
diff --git a/examples/php/Dockerfile b/examples/php/Dockerfile
@@ -8,4 +8,8 @@ COPY main.php ./main.php
 ENV PYROSCOPE_APPLICATION_NAME=simple.php.app
 ENV PYROSCOPE_SERVER_ADDRESS=http://pyroscope:4040/
 ENV PYROSCOPE_LOG_LEVEL=debug
+
+RUN adduser --disabled-password --gecos --quiet pyroscope
+USER pyroscope
+
 CMD ["pyroscope", "exec", "php", "main.php"]
diff --git a/examples/python/Dockerfile b/examples/python/Dockerfile
@@ -8,4 +8,8 @@ COPY main.py ./main.py
 ENV PYROSCOPE_APPLICATION_NAME=simple.python.app
 ENV PYROSCOPE_SERVER_ADDRESS=http://pyroscope:4040/
 ENV PYROSCOPE_LOG_LEVEL=debug
+
+RUN adduser --disabled-password --gecos --quiet pyroscope
+USER pyroscope
+
 CMD ["pyroscope", "exec", "python", "main.py"]
diff --git a/examples/ruby/Dockerfile b/examples/ruby/Dockerfile
@@ -7,4 +7,9 @@ COPY main.rb ./main.rb
 
 ENV PYROSCOPE_APPLICATION_NAME=simple.ruby.app
 ENV PYROSCOPE_SERVER_ADDRESS=http://pyroscope:4040/
+ENV PYROSCOPE_LOG_LEVEL=debug
+
+RUN adduser --disabled-password --gecos --quiet pyroscope
+USER pyroscope
+
 CMD ["pyroscope", "exec", "ruby", "main.rb"]