forked from freudenreichan/EinfuehrungInDocker_Pipeline2
This commit is contained in:
parent
63d7683d18
commit
1bf9339f1c
@ -24,14 +24,14 @@ WORKDIR /app
|
||||
RUN apk update && apk upgrade --no-cache
|
||||
|
||||
# Non-Root User anlegen
|
||||
# RUN addgroup -S appgroup
|
||||
# RUN adduser -S appuser -G appgroup
|
||||
RUN addgroup -S appgroup
|
||||
RUN adduser -S appuser -G appgroup
|
||||
|
||||
# Verzeichnis für Ausgabe anlegen
|
||||
RUN mkdir -p /output
|
||||
|
||||
# Dem User die Rechte für die Ordner /app und /output geben
|
||||
# RUN chown -R appuser:appgroup /app /output
|
||||
RUN chown -R appuser:appgroup /app /output
|
||||
|
||||
# nur die fertige Binärdatei aus der "builder"-Stage kopieren
|
||||
COPY --from=builder /build/deployment /app/
|
||||
@ -41,7 +41,7 @@ COPY --from=builder /build/deployment /app/
|
||||
VOLUME ["/output"]
|
||||
|
||||
# 4. Ab hier läuft alles als sicherer Non-Root User
|
||||
# USER appuser
|
||||
USER appuser
|
||||
|
||||
# 5. Healthcheck implementieren
|
||||
# Da das C-Programm alle 10 Sekunden etwas schreibt, prüfen wir alle 15 Sekunden,
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user