diff --git a/Dockerfile b/Dockerfile index 733ede1eae..120f0dc56d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,8 +1,9 @@ FROM cgr.dev/chainguard/static:latest ARG TARGETARCH -USER nonroot:nonroot +# 65532 is the UID of the `nonroot` user in chainguard/static. See: https://edu.chainguard.dev/chainguard/chainguard-images/reference/static/overview/#users +USER 65532:65532 -COPY --chown=nonroot:nonroot "build/zarf-linux-$TARGETARCH" /zarf +COPY --chown=65532:65532 "build/zarf-linux-$TARGETARCH" /zarf CMD ["/zarf", "internal", "agent", "-l=trace", "--no-log-file"]