run as non root

12 months ago · df32104d00
parent 0ffe019430
commit df32104d00
1 changed files with 8 additions and 0 deletions
--- a/8
+++ b/8
@ -14,4 +14,12 @@ COPY src /app
 COPY VERSION /app
 WORKDIR /app

+ARG USER_ID=1000
+ARG GROUP_ID=1000
+
+RUN addgroup --gid $GROUP_ID appuser && \
+    adduser --uid $USER_ID --gid $GROUP_ID --disabled-password --gecos "" appuser
+
+USER appuser
+
 CMD [ "python", "-u", "/app/amcrest2mqtt.py" ]