update docker images to use non root user

conduitxyz · Nov 24, 2024 · 3512b1c · 3512b1c
1 parent d31a685
commit 3512b1c
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/op-batcher/Dockerfile b/op-batcher/Dockerfile
@@ -27,4 +27,9 @@ FROM alpine:3.16
 
 COPY --from=builder /app/op-batcher/bin/op-batcher /usr/local/bin
 
+RUN addgroup -g 60000 -S conduit && \
+    adduser  -u 60000 -S -G conduit -h /conduit conduit
+
+USER conduit:conduit
+
 ENTRYPOINT ["op-batcher"]
diff --git a/op-node/Dockerfile b/op-node/Dockerfile
@@ -25,4 +25,9 @@ FROM alpine:3.16
 
 COPY --from=builder /app/op-node/bin/op-node /usr/local/bin
 
+RUN addgroup -g 60000 -S conduit && \
+    adduser  -u 60000 -S -G conduit -h /conduit conduit
+
+USER conduit:conduit
+
 CMD ["op-node"]
diff --git a/op-proposer/Dockerfile b/op-proposer/Dockerfile
@@ -26,4 +26,9 @@ FROM alpine:3.16
 
 COPY --from=builder /app/op-proposer/bin/op-proposer /usr/local/bin
 
+RUN addgroup -g 60000 -S conduit && \
+    adduser  -u 60000 -S -G conduit -h /conduit conduit
+
+USER conduit:conduit
+
 CMD ["op-proposer"]