Merge pull request #210 from bookingcom/emadolsky/use-nonroot-user-in…

…-dockerfiles Use nonroot user in dockerfiles
bookingcom · Dec 15, 2023 · ec279c9 · ec279c9
2 parents dc9b169 + cad71ed
commit ec279c9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/test/k8s/nt.Dockerfile b/test/k8s/nt.Dockerfile
@@ -12,6 +12,9 @@ WORKDIR /nt
 COPY --from=builder /nt/nanotube /nt
 COPY ./k8s/config /nt/config
 
+RUN     adduser graphite --disabled-password
+USER    graphite
+
 # main listening port
 EXPOSE 2003
 # Prometheus port

diff --git a/test/k8s/sender.Dockerfile b/test/k8s/sender.Dockerfile
@@ -11,4 +11,7 @@ WORKDIR /nt
 COPY --from=builder /nt/sender /nt
 COPY --from=builder /nt/k8s/in /nt/in
 
+RUN     adduser graphite --disabled-password
+USER    graphite
+
 ENTRYPOINT ["./sender", "-data", "in", "-host", "localhost", "-port", "2003", "-rate", "100", "-cycle", "-retryTCP", "-promPort", "9090"]