Dockerfile: use non-privileged user account (#16052)

50dbe8e2 · Federico Gimenez · Felix Lange · ec8ee611 · 50dbe8e2 · 50dbe8e2
Commit 50dbe8e2 authored Apr 05, 2018 by Federico Gimenez Committed by Felix Lange Apr 05, 2018
Hide whitespace changes
Inline Side-by-side

Showing with 12 additions and 0 deletions

Dockerfile Dockerfile +6 -0

Dockerfile.alltools Dockerfile.alltools +6 -0

No files found.
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,5 +12,11 @@ FROM alpine:latest
 RUN apk add --no-cache ca-certificates
 COPY --from=builder /go-ethereum/build/bin/geth /usr/local/bin/

+RUN addgroup -g 1000 geth && \
+    adduser -h /root -D -u 1000 -G geth geth && \
+    chown geth:geth /root
+
+USER geth
+
 EXPOSE 8545 8546 30303 30303/udp 30304/udp
 ENTRYPOINT ["geth"]
--- a/Dockerfile.alltools
+++ b/Dockerfile.alltools
@@ -12,4 +12,10 @@ FROM alpine:latest
 RUN apk add --no-cache ca-certificates
 COPY --from=builder /go-ethereum/build/bin/* /usr/local/bin/

+RUN addgroup -g 1000 geth && \
+    adduser -h /root -D -u 1000 -G geth geth \
+    chown geth:geth /root
+
+USER geth
+
 EXPOSE 8545 8546 30303 30303/udp 30304/udp