Update docker images to use non-root user (#100)

subquery · Mar 7, 2024 · 35c5388 · 35c5388
1 parent eba0c78
commit 35c5388
Showing 1 changed file with 13 additions and 5 deletions.
diff --git a/packages/node/Dockerfile b/packages/node/Dockerfile
@@ -23,13 +23,21 @@ FROM node:18-alpine
 COPY --from=builder /app/packages/node/app.tgz /app.tgz
 
 # Install production dependencies
-RUN apk add --no-cache tini curl git && \
-    tar -xzvf /app.tgz --strip 1 && \
-    rm /app.tgz && \
-    yarn install --production && \
+RUN apk add --no-cache tini curl git &&  \
+    apk add --no-cache python3 make g++ &&  \
+    npm install -g node-gyp
+
+# Install the app
+RUN npm i -g app.tgz
+
+# Clean up unused deps
+RUN rm /app.tgz && \
     yarn cache clean && \
     rm -rf /root/.npm /root/.cache
 
+# Make the user not ROOT
+USER 1000
+
 # Set Entry point and command
-ENTRYPOINT ["/sbin/tini", "--", "bin/run"]
+ENTRYPOINT ["/sbin/tini", "--", "/usr/local/lib/node_modules/@subql/node-near/bin/run"]
 CMD ["-f","/app"]