OPS-7058 Rootless Dockerfile

dBildungsplattform · Jan 16, 2025 · 5199fc4 · 5199fc4
1 parent c6bf5b9
commit 5199fc4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -19,4 +19,8 @@ RUN apk add --no-cache ca-certificates
 
 COPY --from=build /workspace/infra-autoscaler /usr/local/bin/infra-autoscaler
 COPY config/scaler_config.yml config/scaler_config.yml
+
+RUN chown -R nobody:nogroup /usr/local/bin/infra-autoscaler config/scaler_config.yml
+USER nobody
+
 ENTRYPOINT ["infra-autoscaler"]