Set USER in Dockerfile

eclipse-pass · Jan 9, 2025 · f7e6c89 · f7e6c89
1 parent 67f031e
commit f7e6c89
Show file tree

Hide file tree

Showing 6 changed files with 41 additions and 11 deletions.
diff --git a/pass-deposit-services/deposit-core/Dockerfile b/pass-deposit-services/deposit-core/Dockerfile
@@ -6,8 +6,13 @@ COPY target/deposit-core-*-exec.jar pass-deposit-service-exec.jar
 COPY entrypoint.sh .
 
 RUN apt update \
-    && apt install -y curl \
+    && apt --no-install-recommends install -y curl \
     && chmod +x entrypoint.sh \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1432 passdsgroup \
+    && useradd -m -u 1532 -g passdsgroup passdsuser \
+    && chown -R passdsuser:passdsgroup /app
+
+USER passdsuser
 
 ENTRYPOINT ["./entrypoint.sh"]
diff --git a/pass-grant-loader/Dockerfile b/pass-grant-loader/Dockerfile
@@ -6,9 +6,14 @@ COPY target/pass-grant-loader-*-exec.jar jhu-grant-loader-exec.jar
 COPY entrypoint.sh .
 
 RUN apt update \
-    && apt install -y curl \
+    && apt --no-install-recommends install -y curl \
     && chmod +x entrypoint.sh \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1432 passglgroup \
+    && useradd -m -u 1532 -g passglgroup passgluser \
+    && chown -R passgluser:passglgroup /app
+
+USER passgluser
 
 ENTRYPOINT ["./entrypoint.sh"]
 CMD ["--help"]
diff --git a/pass-journal-loader/pass-journal-loader-nih/Dockerfile b/pass-journal-loader/pass-journal-loader-nih/Dockerfile
@@ -6,8 +6,13 @@ COPY target/pass-journal-loader-nih-*-exec.jar pass-journal-loader-nih-exec.jar
 COPY entrypoint.sh .
 
 RUN apt update \
-    && apt install -y curl \
+    && apt --no-install-recommends install -y curl \
     && chmod +x entrypoint.sh \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1432 passjlgroup \
+    && useradd -m -u 1532 -g passjlgroup passjluser \
+    && chown -R passjluser:passjlgroup /app
+
+USER passjluser
 
 ENTRYPOINT ["./entrypoint.sh"]
diff --git a/pass-nihms-loader/nihms-docker/Dockerfile b/pass-nihms-loader/nihms-docker/Dockerfile
@@ -7,8 +7,13 @@ COPY ./target/nihms-data-transform-load-*-exec.jar nihms-data-transform-load-exe
 COPY entrypoint.sh .
 
 RUN apt update \
-    && apt install -y curl \
+    && apt --no-install-recommends install -y curl \
     && chmod +x entrypoint.sh \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1432 passnlgroup \
+    && useradd -m -u 1532 -g passnlgroup passnluser \
+    && chown -R passnluser:passnlgroup /app
+
+USER passnluser
 
 ENTRYPOINT ["./entrypoint.sh"]
diff --git a/pass-nihms-loader/nihms-token-refresh/Dockerfile b/pass-nihms-loader/nihms-token-refresh/Dockerfile
@@ -22,6 +22,11 @@ RUN chmod +x entrypoint.sh \
     && chmod +x run_refresh.sh \
     && chmod +x set_aws_param_store.sh \
     && npm install \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1432 passntrgroup \
+    && useradd -m -u 1532 -g passntrgroup passntruser \
+    && chown -R passntruser:passntrgroup /app
+
+USER passntruser
 
 ENTRYPOINT ["./entrypoint.sh"]
diff --git a/pass-notification-service/Dockerfile b/pass-notification-service/Dockerfile
@@ -6,8 +6,13 @@ COPY target/pass-notification-service-*-exec.jar pass-notification-service-exec.
 COPY entrypoint.sh .
 
 RUN apt update \
-    && apt install -y curl \
+    && apt --no-install-recommends install -y curl \
     && chmod +x entrypoint.sh \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1432 passnsgroup \
+    && useradd -m -u 1532 -g passnsgroup passnsuser \
+    && chown -R passnsuser:passnsgroup /app
+
+USER passnsuser
 
 ENTRYPOINT ["./entrypoint.sh"]