Merge pull request #18 from TheSecretOrganization/9-run-containers-as…

…-non-root-user updated Django to run as non-root
TheSecretOrganization · Aug 5, 2024 · 89611ca · 89611ca
2 parents 5fda119 + d48d4d9
commit 89611ca
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/django/Dockerfile b/django/Dockerfile
@@ -4,6 +4,11 @@ WORKDIR /app
 EXPOSE 8000
 VOLUME [ "/app" ]
 
+RUN groupadd -r appUser && useradd -r -g appUser appUser
+RUN chown appUser:appUser /app
+RUN mkdir /static
+RUN chown appUser:appUser /static
+
 ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED=1
 
@@ -16,4 +21,6 @@ RUN pip install --no-cache-dir -r requirements.txt
 COPY conf/entrypoint.sh /entrypoint.sh
 RUN chmod a+x /entrypoint.sh
 
+USER appUser
+
 CMD [ "/entrypoint.sh" ]