Skip to content
Snippets Groups Projects
Unverified Commit 6bd20036 authored by BITARD Michaël's avatar BITARD Michaël Committed by GitHub
Browse files

fix(infra): l'api est lancée avec un utilisateur non-root (#770)

parent e62db98f
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 15 additions and 6 deletions
Dockerfile.api
+ 15
− 6
View file @ 6bd20036
FROM node:20.3-alpine FROM node:20.3-alpine
WORKDIR / WORKDIR /
RUN apk add make # on profite que
COPY ./package-lock.json / # - l'utilisateur a le même id sur toutes les machines
COPY ./Makefile /Makefile # - ansible crée les dossiers avec les bons droits
COPY ./package.json / RUN apk add make && \
COPY ./packages/api/ /packages/api adduser -u 1002 -D nonroot && \
COPY ./packages/common/ /packages/common mkdir node_modules && \
chown nonroot:nonroot node_modules
USER nonroot
COPY --chown=nonroot:nonroot ./package-lock.json /
COPY --chown=nonroot:nonroot ./Makefile /Makefile
COPY --chown=nonroot:nonroot ./package.json /
COPY --chown=nonroot:nonroot ./packages/api/ /packages/api
COPY --chown=nonroot:nonroot ./packages/common/ /packages/common
RUN CI=true make install/prod RUN CI=true make install/prod
ENTRYPOINT ["make", "start/api"] ENTRYPOINT ["make", "start/api"]
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment