[REVERT][REVERRT] Add group and user in dockerfile to run container as unprivileged

[Lissy93]

PR to re-apply @Singebob's changes originally released in #495.

There was an issue that caused breaking changes for users, as raised in #498 and #499

Before merging, I need to either fix this, or update the documentation appropriately.

[netlify]

✔️ Deploy Preview for dashy-dev ready!

🔨 Explore the source changes: 39dbb4c

🔍 Inspect the deploy log: https://app.netlify.com/sites/dashy-dev/deploys/6212c4e69a4b220008d6cd09

😎 Browse the preview: https://deploy-preview-502--dashy-dev.netlify.app

[viezly]

Changes preview:

Legend:

👀 Review pull request on Viezly

[liss-bot]

This PR is stale because it has been open 6 weeks with no activity. Either remove the stale label or comment below with a short update, otherwise this PR will be closed in 5 days.

[bmonty]

Suggested change

	COPY --from=BUILD_IMAGE --chown=${USER}:${USER} /app ./
	COPY --from=BUILD_IMAGE /app ./

As long as the code doesn't need permissions to modify the source itself, I'd set the permissions so root owns the files and everyone else can read them (644). Otherwise, if there was a way for someone to take over the node process, they could add their own files and/or modify the source code.

[bmonty]

In my testing to run Dashy in my Kubernetes cluster, I can't get the app to run as a non-root user. There are two main issues:

1. Default port is 80, which is not usable by a non-root user. Easy to fix by setting the PORT variable to a higher number (8080 works).
2. Part of the startup process does an rmdir /app/dist. If I run the code as a non-root user, it doesn't have the permissions to do this and the startup fails. I don't have a workaround for this one.

I'm not sure the changes in this PR would fix the second issue.

[liss-bot]

This PR is stale because it has been open 6 weeks with no activity. Either remove the stale label or comment below with a short update, otherwise this PR will be closed in 5 days.

[freakytoad1]

In my testing to run Dashy in my Kubernetes cluster, I can't get the app to run as a non-root user. There are two main issues:

1. Default port is 80, which is not usable by a non-root user. Easy to fix by setting the PORT variable to a higher number (8080 works).
2. Part of the startup process does an rmdir /app/dist. If I run the code as a non-root user, it doesn't have the permissions to do this and the startup fails. I don't have a workaround for this one.

I'm not sure the changes in this PR would fix the second issue.

Did your 2nd point ever get resolved? I have this same behavior on 3.1.1 when setting runAsNonRoot
@bmonty