run with an unprivileged user

2024-05-31 09:35:19 +02:00 · 2024-05-31 09:35:19 +02:00 · ae5fa40469
commit ae5fa40469
parent aefc35a9d2
1 changed files with 9 additions and 1 deletions
--- a/10
+++ b/10
@ -14,8 +14,16 @@ RUN git checkout $VERSION

 RUN go build ./cmd/syncv3

-FROM scratch
+FROM docker.io/alpine:3.20
+
+RUN addgroup -g 2222 matrix-sync
+RUN adduser -h /var/lib/matrix-sync -u 2222 -D -G matrix-sync matrix-sync
+
+RUN apk --no-cache add \
+  ca-certificates

 COPY --from=builder /build/sliding-sync/syncv3 /syncv3
+
+USER matrix-sync
 ENTRYPOINT [ "/syncv3" ]
 EXPOSE 8008