From 162ce157b581e878465c23061008fa2c58e66d1c Mon Sep 17 00:00:00 2001 From: HazCod Date: Thu, 26 May 2016 16:49:11 +0200 Subject: [PATCH 1/2] Run as node user, not as root This runs the process as user 'node', not as root. --- Dockerfile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Dockerfile b/Dockerfile index 3a9b0c5..dc9c632 100644 --- a/Dockerfile +++ b/Dockerfile @@ -10,5 +10,9 @@ COPY package.json package.json RUN npm install --production COPY index.js /usr/src/app/index.js +RUN useradd -ms /bin/bash node +RUN chown node:node -R /usr/src + +USER node ENTRYPOINT ["/usr/src/app/index.js"] CMD [] From b21708f599b4a66e0c93fd8b8db5a9f5c39065d5 Mon Sep 17 00:00:00 2001 From: HazCod Date: Thu, 26 May 2016 16:57:23 +0200 Subject: [PATCH 2/2] Remove empty CMD statement No need for CMD --- Dockerfile | 1 - 1 file changed, 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index dc9c632..82cc529 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,4 +15,3 @@ RUN chown node:node -R /usr/src USER node ENTRYPOINT ["/usr/src/app/index.js"] -CMD []