non-root user

TartuNLP · Sep 13, 2021 · 81b365b · 81b365b
1 parent 8e68be4
commit 81b365b
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 5 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -8,13 +8,16 @@ RUN apk update \
     musl-dev \
     git
 
-WORKDIR /var/log/app
 WORKDIR /app
+RUN adduser -D app; chown -R app:app /app
 
-COPY requirements/requirements.txt .
-RUN pip install -r requirements.txt && rm requirements.txt
+USER app
+ENV PATH="/home/app/.local/bin:${PATH}"
 
-COPY . .
+COPY --chown=app:app requirements/requirements.txt .
+RUN pip install --user -r requirements.txt && rm requirements.txt
+
+COPY --chown=app:app . .
 
 EXPOSE 5000
 

diff --git a/config/logging.ini b/config/logging.ini
@@ -44,7 +44,7 @@ args = (sys.stdout, )
 [handler_file]
 class = handlers.RotatingFileHandler
 formatter = simple
-args = ('/var/log/app/nmt_api.log', 'a', 10000000, 15)
+args = ('/app//logs/nmt_api.log', 'a', 10000000, 15)
 
 [formatter_simple]
 format = [%(asctime)s] [%(levelname)s] [%(name)s]: %(message)s
diff --git a/logs/.gitignore b/logs/.gitignore
@@ -0,0 +1,4 @@
+# Ignore everything in this directory
+*
+# Except this file
+!.gitignore