From 25520a476310f43cace12f87aa6b45b94a7bbdab Mon Sep 17 00:00:00 2001 From: Andreas Scheibal Date: Wed, 23 Mar 2022 09:08:21 +0100 Subject: [PATCH] feat: unprivileged docker user (#162) --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index e95e0f80..5b73f265 100644 --- a/Dockerfile +++ b/Dockerfile @@ -8,4 +8,6 @@ ENV JAVA_OPTS="$JAVA_OPTS -Xms256M -Xmx1G" EXPOSE 8080 +USER 65534:65534 + ENTRYPOINT [ "sh", "-c", "java $JAVA_OPTS -Djava.security.egd=file:/dev/./urandom -jar /dgcg.jar" ]