#557 - Run as user 'efcuser'

efcsydney · Jun 15, 2019 · 22676c6 · 22676c6
1 parent ec6d06e
commit 22676c6
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/docker/Dockerfile-prod b/docker/Dockerfile-prod
@@ -1,18 +1,15 @@
 FROM mhart/alpine-node:8.12.0
 
-
 ARG REACT_APP_ENV=qa
 ENV REACT_APP_ENV=${REACT_APP_ENV}
 
 RUN apk update && apk add --no-cache bash py-pip jq
 RUN npm install -g [email protected] && npm install -g pm2@latest
 RUN apk add mysql-client
 
-
 RUN pip install awscli --upgrade --user && \
     echo "export PATH=$PATH:~/.local/bin/" >> ~/.bashrc
 
-
 COPY ./ /opt/efcsydney-roster/
 RUN ls /opt/efcsydney-roster/
 WORKDIR /opt/efcsydney-roster
@@ -22,6 +19,9 @@ WORKDIR /opt/efcsydney-roster/client
 RUN yarn ; yarn build ; rm -rf ./node_modules
 
 WORKDIR /opt/efcsydney-roster
+RUN addgroup -S efcuser && adduser -S efcuser -G efcuser
+RUN chown efcuser:efcuser -R /opt/efcsydney-roster
 
+USER efcuser
 EXPOSE 3000 3001 3002
 ENTRYPOINT ["/bin/bash", "-ex", "/opt/efcsydney-roster/docker/Entrypoint.sh", "prod"]