Using non root user in controller

Have done some basic testing. Would like some feedback.
apache · Apr 25, 2018 · 884bb91 · 884bb91
1 parent 5ebff8f
commit 884bb91
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/core/controller/Dockerfile b/core/controller/Dockerfile
@@ -16,6 +16,9 @@
 
 FROM scala
 
+ENV UID=1001 \
+ NOT_ROOT_USER=runtimeuser
+
 # Install swagger-ui
 RUN curl -sSL -o swagger-ui-v3.6.0.tar.gz --no-verbose https://github.com/swagger-api/swagger-ui/archive/v3.6.0.tar.gz && \
  mkdir swagger-ui && \
@@ -30,5 +33,8 @@ ADD build/distributions/controller.tar /
 COPY init.sh /
 RUN chmod +x init.sh
 
+RUN adduser -D -u ${UID} -h /home/${NOT_ROOT_USER} -s /bin/bash ${NOT_ROOT_USER}
+USER ${NOT_ROOT_USER}
+
 EXPOSE 8080
 CMD ["./init.sh", "0"]