using numeric IDs allows the image to run on kubernetes with the runAsNonRoot security context
This commit is contained in:
parent
4b98c98f49
commit
7994a768ad
1 changed files with 2 additions and 1 deletions
|
@ -60,7 +60,8 @@ RUN \
|
|||
COPY etc/ /etc/
|
||||
|
||||
WORKDIR /var/www
|
||||
USER nobody:www-data
|
||||
# user nobody, group www-data
|
||||
USER 65534:82
|
||||
|
||||
# mark dirs as volumes that need to be writable, allows running the container --read-only
|
||||
VOLUME /run /srv/data /tmp /var/lib/nginx/tmp
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue