From cf0e7a12e408f194f160bcd33ddc4b89f8762e65 Mon Sep 17 00:00:00 2001
From: Tobias Florek <me@ibotty.net>
Date: Thu, 8 Jul 2021 19:30:09 +0000
Subject: [PATCH] specify user in rootless container numerically (#16361)

* specify user in rootless container numerically

With kubernetes' PodSecurityPolicy set to runAsNonRoot it will not allow starting the container.  The error message is
```
Error: container has runAsNonRoot and image has non-numeric user (git), cannot verify user is non-root
```
The `USER` directive has to be numerical for that to work.

* mention the name of the uid/gid

Co-authored-by: 6543 <6543@obermui.de>
---
 Dockerfile.rootless | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile.rootless b/Dockerfile.rootless
index 70f6540112d4d..efdb3bb728891 100644
--- a/Dockerfile.rootless
+++ b/Dockerfile.rootless
@@ -56,7 +56,7 @@ COPY docker/rootless /
 COPY --from=build-env --chown=root:root /go/src/code.gitea.io/gitea/gitea /usr/local/bin/gitea
 COPY --from=build-env --chown=root:root /go/src/code.gitea.io/gitea/environment-to-ini /usr/local/bin/environment-to-ini
 
-USER git:git
+USER 1000:1000 # git:git
 ENV GITEA_WORK_DIR /var/lib/gitea
 ENV GITEA_CUSTOM /var/lib/gitea/custom
 ENV GITEA_TEMP /tmp/gitea