Merge pull request oliver006#504 from mcsps/master

Run Docker image as non-root
bitleak · Mar 22, 2021 · f367ed4 · f367ed4
2 parents eeb96b8 + 9e5997d
commit f367ed4
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/docker/Dockerfile.amd64 b/docker/Dockerfile.amd64
@@ -39,5 +39,8 @@ FROM alpine as alpine
 COPY --from=builder /redis_exporter /redis_exporter
 COPY --from=builder /etc/ssl/certs /etc/ssl/certs
 
+# Run as non-root user for secure environments
+USER 59000:59000
+
 EXPOSE     9121
 ENTRYPOINT [ "/redis_exporter" ]
diff --git a/docker/Dockerfile.arm b/docker/Dockerfile.arm
@@ -25,5 +25,8 @@ FROM arm32v6/alpine:3.6 as alpine-arm
 COPY --from=builder /redis_exporter /redis_exporter
 COPY --from=builder /etc/ssl/certs /etc/ssl/certs
 
+# Run as non-root user for secure environments
+USER 59000:59000
+
 EXPOSE     9121
 ENTRYPOINT [ "/redis_exporter" ]
diff --git a/docker/Dockerfile.arm64 b/docker/Dockerfile.arm64
@@ -25,6 +25,9 @@ FROM arm64v8/alpine:3.6 as alpine-arm64
 COPY --from=builder /redis_exporter /redis_exporter
 COPY --from=builder /etc/ssl/certs /etc/ssl/certs
 
+# Run as non-root user for secure environments
+USER 59000:59000
+
 EXPOSE     9121
 ENTRYPOINT [ "/redis_exporter" ]