graham/aprs.me
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

dockerfile update

Browse source
This commit is contained in:
Graham McIntire 2025-06-15 14:04:17 -05:00
parent fe3d5ebf8d
commit 5710020393
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
Dockerfile
View file

@ -74,8 +74,8 @@ RUN apt-get update -y && \
apt-get clean && \ apt-get clean && \
rm -rf /var/lib/apt/lists/* && \ rm -rf /var/lib/apt/lists/* && \
# Create a non-root user and group with specific ID # Create a non-root user and group with specific ID
groupadd -g 65534 aprs && \ groupadd -g 1000 aprs && \
useradd -r -g aprs -u 65534 -s /bin/false -M aprs && \ useradd -r -g aprs -u 1000 -s /bin/false -M aprs && \
# Remove setuid and setgid permissions # Remove setuid and setgid permissions
find / -perm /6000 -type f -exec chmod a-s {} \; || true && \ find / -perm /6000 -type f -exec chmod a-s {} \; || true && \
# Secure system configurations # Secure system configurations
@ -111,9 +111,9 @@ ENV MIX_ENV="prod" \
ERL_AFLAGS="+S 1:1 +A 1 +K true -kernel shell_history enabled -kernel shell_history_file_bytes 0" ERL_AFLAGS="+S 1:1 +A 1 +K true -kernel shell_history enabled -kernel shell_history_file_bytes 0"
# Only copy the final release from the build stage # Only copy the final release from the build stage
COPY --from=builder --chown=aprs:aprs /app/_build/${MIX_ENV}/rel/aprs ./ COPY --from=builder --chown=1000:1000 /app/_build/${MIX_ENV}/rel/aprs ./
USER aprs USER 1000
# Ensure the server binary is executable # Ensure the server binary is executable
RUN chmod +x /app/bin/server RUN chmod +x /app/bin/server