run as non-root user in docker

ContainX · Mar 5, 2017 · bbf3243 · bbf3243
1 parent 870fb10
commit bbf3243
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -2,5 +2,10 @@ FROM maven:latest
 
 COPY . /usr/src/app
 WORKDIR /usr/src/app
+
+RUN useradd -m -u 1000 builder
+RUN chown -R builder /usr/src/app
+USER builder
+
 RUN mvn clean compile
 
diff --git a/Makefile b/Makefile
@@ -5,7 +5,7 @@
 
 GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD 2>/dev/null)
 IMAGE_NAME := openstack4j-dev$(if $(GIT_BRANCH),:$(GIT_BRANCH))
-DOCKER_RUN := docker run --rm -it --privileged $(IMAGE_NAME)
+DOCKER_RUN := docker run --rm -it --privileged -e MAVEN_CONFIG=/home/builder/.m2 $(IMAGE_NAME)
 
 default: build
 
@@ -21,4 +21,4 @@ package: build
 	$(DOCKER_RUN) mvn clean package
 
 build:
-	docker build -t "$(IMAGE_NAME)" .
+	docker build -t "$(IMAGE_NAME)" .