Skip to content

Commit 1f7cb79

Browse files
committed
Container run user changed from name to numeric
Kubernetes security policy runAsNonRoot requires run user to be specified explicitly by numeric ID. Using names is restricted. Signed-off-by: Dragonn <[email protected]>
1 parent 2801093 commit 1f7cb79

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Dockerfile

+1-1
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,5 @@ RUN apk upgrade --no-cache && \
99
RUN install -d -o nobody -g nobody /var/lib/katafygio/data
1010
COPY --from=builder /go/src/github.com/bpineau/katafygio/katafygio /usr/bin/
1111
VOLUME /var/lib/katafygio
12-
USER nobody
12+
USER 65534
1313
ENTRYPOINT ["/sbin/tini", "--", "/usr/bin/katafygio"]

0 commit comments

Comments
 (0)