wip

Kong · Mar 8, 2023 · 2819a1c · 2819a1c
1 parent 26f9a7a
commit 2819a1c
Show file tree

Hide file tree

Showing 4 changed files with 25 additions and 9 deletions.
diff --git a/Dockerfile.apk b/Dockerfile.apk
@@ -30,11 +30,14 @@ RUN set -ex; \
     fi \
     && tar -C / -xzf /tmp/kong.apk.tar.gz \
     && apk add --no-cache libstdc++ libgcc perl tzdata libcap zlib zlib-dev bash \
-    && adduser -S kong \
     && addgroup -S kong \
+    && adduser -S -G kong kong \
     && mkdir -p "${KONG_PREFIX}" \
-    && chown -R kong:0 ${KONG_PREFIX} \
-    && chown kong:0 /usr/local/bin/kong \
+    && chown -R root:kong ${KONG_PREFIX} \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && chmod -R g=u ${KONG_PREFIX} \
     && rm -rf /tmp/kong.apk.tar.gz \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \

diff --git a/Dockerfile.deb b/Dockerfile.deb
@@ -29,8 +29,12 @@ RUN set -ex; \
     && apt-get install --yes /tmp/kong.deb \
     && rm -rf /var/lib/apt/lists/* \
     && rm -rf /tmp/kong.deb \
-    && chown kong:0 /usr/local/bin/kong \
-    && chown -R kong:0 ${KONG_PREFIX} \
+    && chown root:kong /usr/local/bin/kong \
+    && chown -R root:kong ${KONG_PREFIX} \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \

diff --git a/Dockerfile.rpm b/Dockerfile.rpm
@@ -50,8 +50,13 @@ RUN set -ex; \
     && rpm -iv /tmp/kong.rpm \
     && microdnf -y clean all \
     && rm /tmp/kong.rpm \
-    && chown kong:0 /usr/local/bin/kong \
-    && chown -R kong:0 ${KONG_PREFIX} \
+    && echo "addgroup -S kong" \
+    && echo "adduser -S -G kong kong" \
+    && chown -R root:kong ${KONG_PREFIX} \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \

diff --git a/ubuntu/Dockerfile b/ubuntu/Dockerfile
@@ -41,8 +41,12 @@ RUN set -ex; \
     && apt install --yes /tmp/kong.deb \
     && rm -rf /var/lib/apt/lists/* \
     && rm -rf /tmp/kong.deb \
-    && chown kong:0 /usr/local/bin/kong \
-    && chown -R kong:0 /usr/local/kong \
+    && adduser --system --disabled-password --ingroup kong --no-create-home kong \
+    && chown -R root:kong /usr/local/kong \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \