Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set nogroup in Dockerfile. Fixes #1419 #1420

Merged
merged 3 commits into from
Mar 13, 2024
Merged

Set nogroup in Dockerfile. Fixes #1419 #1420

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f05753b
set group in COPY
gardenrobot Mar 10, 2024
a8a7e23
create radicale group
gardenrobot Mar 13, 2024
8b4e28a
set group id explicitly
gardenrobot Mar 13, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,11 @@ FROM python:3-alpine

WORKDIR /app

RUN adduser radicale --home /var/lib/radicale --system --uid 1000 --disabled-password \
RUN addgroup -g 1000 radicale \
&& adduser radicale --home /var/lib/radicale --system --uid 1000 --disabled-password -G radicale \
&& apk add --no-cache ca-certificates openssl

COPY --chown=radicale --from=builder /app/venv /app
COPY --chown=radicale:radicale --from=builder /app/venv /app

# Persistent storage for data
VOLUME /var/lib/radicale
Expand Down
7 changes: 4 additions & 3 deletions Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,10 +15,11 @@ FROM python:3-alpine

WORKDIR /app

RUN adduser radicale --home /var/lib/radicale --system --uid 1000 --disabled-password \
RUN addgroup -g 1000 radicale \
&& adduser radicale --home /var/lib/radicale --system --uid 1000 --disabled-password -G radicale \
&& apk add --no-cache ca-certificates openssl

COPY --chown=radicale --from=builder /app/venv /app
COPY --chown=radicale:radicale --from=builder /app/venv /app

# Persistent storage for data
VOLUME /var/lib/radicale
Expand All @@ -28,4 +29,4 @@ EXPOSE 5232
ENTRYPOINT [ "/app/bin/python", "/app/bin/radicale"]
CMD ["--hosts", "0.0.0.0:5232"]

USER radicale
USER radicale
Loading