Преглед изворни кода

Merge pull request #2175 from mattray/ui_fix_1.106

Sync Dockerfile and Dockerfile.cross and run as non-root user for 1.106
Ajay Tripathy пре 2 година
родитељ
комит
6a7d9ada3c
2 измењених фајлова са 19 додато и 2 уклоњено
  1. 12 1
      ui/Dockerfile
  2. 7 1
      ui/Dockerfile.cross

+ 12 - 1
ui/Dockerfile

@@ -6,12 +6,23 @@ ADD src /opt/ui/src
 RUN npx parcel build src/index.html
 
 FROM nginx:alpine
+
 COPY --from=builder /opt/ui/dist /var/www
 COPY default.nginx.conf /etc/nginx/conf.d/
 COPY nginx.conf /etc/nginx/
+COPY ./docker-entrypoint.sh /usr/local/bin/
+RUN rm -rf /etc/nginx/conf.d/default.conf
+
+RUN adduser 1001 -g 1000 -D
+RUN chown 1001:1000 -R /var/www
+RUN chown 1001:1000 -R /etc/nginx
+RUN chown 1001:1000 -R /usr/local/bin/docker-entrypoint.sh
+
+ENV BASE_URL=/model
+
+USER 1001
 
 ENV BASE_URL=/model
 
-COPY ./docker-entrypoint.sh /usr/local/bin/
 ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
 CMD ["nginx", "-g", "daemon off;"]

+ 7 - 1
ui/Dockerfile.cross

@@ -2,9 +2,15 @@ FROM nginx:alpine
 COPY ./dist /var/www
 COPY default.nginx.conf /etc/nginx/conf.d/
 COPY nginx.conf /etc/nginx/
+COPY ./docker-entrypoint.sh /usr/local/bin/
+RUN rm -rf /etc/nginx/conf.d/default.conf
+
+RUN adduser 1001 -g 1000 -D
+RUN chown 1001:1000 -R /var/www
+RUN chown 1001:1000 -R /etc/nginx
+RUN chown 1001:1000 -R /usr/local/bin/docker-entrypoint.sh
 
 ENV BASE_URL=/model
 
-COPY ./docker-entrypoint.sh /usr/local/bin/
 ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
 CMD ["nginx", "-g", "daemon off;"]