From 1ab408c591605656dc580de65925438d03f8226d Mon Sep 17 00:00:00 2001 From: Kyle Spearrin Date: Mon, 26 Mar 2018 11:24:09 -0400 Subject: [PATCH] non-root docker --- Dockerfile | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index 86d7eeba..43552694 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,14 +1,18 @@ FROM bitwarden/server -RUN groupadd -g 999 bitwarden && \ - useradd -r -u 999 -g bitwarden bitwarden -USER bitwarden - +ENV ASPNETCORE_URLS http://+:5000 WORKDIR /app +EXPOSE 5000 COPY ./dist . - -EXPOSE 80 - COPY entrypoint.sh / -RUN chmod +x /entrypoint.sh + +RUN groupadd -g 999 bitwarden \ + && useradd -r -u 999 -g bitwarden bitwarden \ + && chown -R bitwarden:bitwarden /app \ + && mkdir /etc/bitwarden \ + && chown -R bitwarden:bitwarden /etc/bitwarden \ + && chmod +x /entrypoint.sh \ + && chown bitwarden:bitwarden /entrypoint.sh + +USER bitwarden ENTRYPOINT ["/entrypoint.sh"]