From 2f0eb77c080c96d7ba12402ea6355ea368871f1d Mon Sep 17 00:00:00 2001 From: Hentry Martin Date: Tue, 10 Dec 2024 21:57:48 +0100 Subject: [PATCH] fix: default user privilege --- docker/Dockerfile | 4 ++++ test-automation/Dockerfile | 3 +++ 2 files changed, 7 insertions(+) diff --git a/docker/Dockerfile b/docker/Dockerfile index 496381d5..8eaf11db 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -1,5 +1,6 @@ # Use the base image with Node.js FROM node:12 +RUN useradd -m -s /bin/bash appuser ARG NODE_ENV ARG BABEL_ENV @@ -18,6 +19,9 @@ COPY . /challenge-engine-ui # Set working directory for future use WORKDIR /challenge-engine-ui +RUN chown -R appuser:appuser /challenge-engine-ui +USER appuser + # Install the dependencies from package.json RUN echo "NODE ENV in Docker: $NODE_ENV" RUN echo "BABEL ENV in Docker: $BABEL_ENV" diff --git a/test-automation/Dockerfile b/test-automation/Dockerfile index 2f5a74ed..843a120a 100644 --- a/test-automation/Dockerfile +++ b/test-automation/Dockerfile @@ -1,4 +1,5 @@ FROM node:10.17.0-stretch +RUN useradd -m -s /bin/bash appuser RUN apt update RUN apt install sudo RUN sudo apt-get update; sudo apt-get install -y openjdk-8-jre openjdk-8-jre-headless openjdk-8-jdk openjdk-8-jdk-headless; @@ -26,6 +27,8 @@ RUN printf '#!/bin/sh\nXvfb :99 -screen 0 1280x1024x24 &\nexec "$@"\n' > /tmp/en COPY . /test-automation WORKDIR /test-automation +RUN chown -R appuser:appuser /test-automation +USER appuser RUN npm install RUN ./node_modules/.bin/webdriver-manager update --versions.chrome=="$(google-chrome -version)" ENTRYPOINT ["/docker-entrypoint.sh"]