updated Django to run as non-root

TheSecretOrganization · Aug 5, 2024 · d48d4d9 · d48d4d9
1 parent 5fda119
commit d48d4d9
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/django/Dockerfile b/django/Dockerfile
@@ -4,6 +4,11 @@ WORKDIR /app
 EXPOSE 8000
 VOLUME [ "/app" ]
 
+RUN groupadd -r appUser && useradd -r -g appUser appUser
+RUN chown appUser:appUser /app
+RUN mkdir /static
+RUN chown appUser:appUser /static
+
 ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED=1
 
@@ -16,4 +21,6 @@ RUN pip install --no-cache-dir -r requirements.txt
 COPY conf/entrypoint.sh /entrypoint.sh
 RUN chmod a+x /entrypoint.sh
 
+USER appUser
+
 CMD [ "/entrypoint.sh" ]