Dockerfile aktualisiert

revert Dockerfile aktualisiert

.drone.yml

@@ -26,7 +26,7 @@ steps:
         fi
 
   - name: security-scan
-    image: aquasec/trivy:latest
+    image: ghcr.io/aquasecurity/trivy:0.69.3
     commands:
       - trivy image --input image.tar --severity HIGH,CRITICAL --exit-code 1
 

Dockerfile

@@ -1,9 +1,8 @@
 # Base-Image
-FROM ubuntu:latest
+FROM alpine:latest AS builder
 
 # Pakete installieren
-RUN apt-get update
+RUN apk add --no-cache build-base
-RUN apt-get install -y build-essential gcc curl vim net-tools
 
 # Arbeitsverzeichnis setzen
 WORKDIR /app
@@ -14,8 +13,25 @@ COPY . .
 # Code kompilieren
 RUN gcc -o deployment deployment.c
 
+# Stage 2
+FROM alpine:latest
+
+RUN apk upgrade --no-cache
+
+RUN addgroup -S stdgroup && adduser -S stduser -G stdgroup
+
+WORKDIR /app
+
+COPY --from=builder /app/deployment .
+
+
 # Verzeichnis für Ausgabe anlegen
-RUN mkdir /output
+RUN mkdir /output && chown stduser:stdgroup /output
+
+VOLUME ["/output"]
+USER stduser
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 CMD test -f /output/output.txt || exit 1
 
 # Ausgabe wird ins Container-Dateisystem geschrieben
 ENTRYPOINT ["/bin/bash", "-c"]