Dockerfile: set user nobody:nogroup

fabiolb · Sep 4, 2024 · fbd256f · fbd256f
1 parent ecf7936
commit fbd256f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -19,7 +19,8 @@ RUN setcap cap_net_bind_service=+ep /src/fabio
 FROM alpine:3.16
 RUN apk update && apk add --no-cache ca-certificates
 COPY --from=build /src/fabio /usr/bin
-ADD fabio.properties /etc/fabio/fabio.properties
+COPY --chown=nobody:nogroup fabio.properties /etc/fabio/fabio.properties
+USER nobody:nogroup
 EXPOSE 9998 9999
 ENTRYPOINT ["/usr/bin/fabio"]
 CMD ["-cfg", "/etc/fabio/fabio.properties"]