using numeric IDs allows the image to run on kubernetes with the runAsNonRoot security context

This commit is contained in:
El RIDO 2020-10-01 19:18:14 +02:00
parent 4b98c98f49
commit 7994a768ad
No known key found for this signature in database
GPG key ID: 0F5C940A6BD81F92

View file

@ -60,7 +60,8 @@ RUN \
COPY etc/ /etc/
WORKDIR /var/www
USER nobody:www-data
# user nobody, group www-data
USER 65534:82
# mark dirs as volumes that need to be writable, allows running the container --read-only
VOLUME /run /srv/data /tmp /var/lib/nginx/tmp