feat: run host-built containers as non-root

knative · Aug 10, 2023 · 4596ad9 · 4596ad9
1 parent 399ab7d
commit 4596ad9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/oci/containerize.go b/pkg/oci/containerize.go
@@ -392,6 +392,7 @@ func newConfig(cfg *buildConfig, p v1.Platform, layers ...v1.Layer) (desc v1.Des
 			Cmd:          []string{"/func/f"}, // NOTE: Using Cmd because Entrypoint can not be overridden
 			WorkingDir:   "/func/",
 			StopSignal:   "SIGKILL",
+			User:         "1000",
 			Volumes:      volumes,
 			// Labels
 			// History