Update Dockerfile

For security reasons, run the Docker container as an unprivileged user
pull/209/head
Sven Gottwald 2021-03-10 15:11:20 +01:00 committed by GitHub
parent 7b8f473ba6
commit 8238a49554
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions

View File

@ -1,5 +1,12 @@
FROM python:3.7-slim
ADD . /code
WORKDIR /code
RUN pip install -r requirements.txt
RUN \
groupadd -r webssh && \
useradd -r -s /bin/false -g webssh webssh && \
chown -R webssh:webssh /code && \
pip install -r requirements.txt
EXPOSE 8888/tcp
USER webssh
CMD ["python", "run.py"]