diff --git a/docker/Dockerfile b/docker/Dockerfile index ce1a83ae1..a01701119 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -1,6 +1,9 @@ # syntax=docker/dockerfile:1 FROM simplyblock/simplyblock:base_image +# Create a non-root user +RUN addgroup --system appgroup && adduser --system --ingroup appgroup appuser + WORKDIR /app COPY requirements.txt . @@ -9,4 +12,8 @@ RUN pip3 install -r requirements.txt COPY . /app -RUN python setup.py install +# Fix ownership to non-root user +RUN chown -R appuser:appgroup /app && \ + python setup.py install + +USER appuser