feat: Use non root user as default user in container image

Signed-off-by: Timo Haas <haastimo@gmx.de>
thanos-io · Feb 7, 2023 · 958c15c · 958c15c
1 parent 4bb560e
commit 958c15c
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -33,6 +33,7 @@ We use *breaking :warning:* to mark changes that are not backward compatible (re
 - [#5887](https://github.com/thanos-io/thanos/pull/5887) Tracing: Make sure rate limiting sampler is the default, as was the case in version pre-0.29.0.
 - [#5997](https://github.com/thanos-io/thanos/pull/5997) Rule: switch to miekgdns DNS resolver as the default one.
 - [#6035](https://github.com/thanos-io/thanos/pull/6035) Replicate: Support all types of matchers to match blocks for replication. Change matcher parameter from string slice to a single string.
+- [#6107](https://github.com/thanos-io/thanos/pull/6082) Change default user id in container image from 0(root) to 1001
 
 ## [v0.30.2](https://github.com/thanos-io/thanos/tree/release-0.30) - 28.01.2023
 

diff --git a/Dockerfile b/Dockerfile
@@ -5,4 +5,5 @@ LABEL maintainer="The Thanos Authors"
 
 COPY /thanos_tmp_for_docker /bin/thanos
 
+USER 1001
 ENTRYPOINT [ "/bin/thanos" ]
diff --git a/Dockerfile.multi-arch b/Dockerfile.multi-arch
@@ -9,4 +9,5 @@ ARG OS="linux"
 
 COPY .build/${OS}-${ARCH}/thanos /bin/thanos
 
+USER 1001
 ENTRYPOINT [ "/bin/thanos" ]
diff --git a/Dockerfile.multi-stage b/Dockerfile.multi-stage
@@ -21,4 +21,5 @@ LABEL maintainer="The Thanos Authors"
 
 COPY --from=builder /go/bin/thanos /bin/thanos
 
+USER 1001
 ENTRYPOINT [ "/bin/thanos" ]