Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2aec90f1 authored by Felix Ableitner's avatar Felix Ableitner
Browse files

Dont run as root user, disallow writing application files

parent e33a5638

Dockerfile

+6 −3
Original line number Diff line number Diff line
@@ -2,8 +2,6 @@ FROM python:3-alpine3.9 


WORKDIR /usr/src/app



# TODO: create new user



COPY app/requirements.txt .



RUN apk add --no-cache openssl \
@@ -13,4 +11,9 @@ RUN apk add --no-cache openssl \ 


COPY app/ .



RUN chown 900:900 . -R \

 && chmod a-w . -R



USER 900



CMD [ "python3", "-u", "./main.py" ]