From 8c36173027c596ec7db46789339157b9685c9226 Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Wed, 12 Oct 2022 12:08:56 +0200 Subject: [PATCH] Use nobody:nogroup under Debian Signed-off-by: Thomas Citharel --- docker/production/Dockerfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/docker/production/Dockerfile b/docker/production/Dockerfile index b1bd2dbcf..28c9bb066 100644 --- a/docker/production/Dockerfile +++ b/docker/production/Dockerfile @@ -50,19 +50,19 @@ LABEL org.opencontainers.image.title="mobilizon" \ RUN apt update && apt dist-upgrade -y && apt install -y curl openssl ca-certificates libncurses5 file postgresql-client gcc g++ imagemagick python3 python3-pip python3-pillow python3-cffi python3-brotli python3-dev libpango-1.0-0 libxslt-dev fonts-cantarell && rm -rf /var/lib/apt RUN pip install weasyprint pyexcel-ods3 -RUN mkdir -p /var/lib/mobilizon/uploads && chown nobody:nobody /var/lib/mobilizon/uploads -RUN mkdir -p /var/lib/mobilizon/uploads/exports/{csv,pdf,ods} && chown -R nobody:nobody /var/lib/mobilizon/uploads/exports +RUN mkdir -p /var/lib/mobilizon/uploads && chown nobody:nogroup /var/lib/mobilizon/uploads +RUN mkdir -p /var/lib/mobilizon/uploads/exports/{csv,pdf,ods} && chown -R nobody:nogroup /var/lib/mobilizon/uploads/exports RUN mkdir -p /var/lib/mobilizon/timezones RUN curl -L 'https://packages.joinmobilizon.org/tz_world/timezones-geodata.dets' -o /var/lib/mobilizon/timezones/timezones-geodata.dets -RUN chown nobody:nobody /var/lib/mobilizon/timezones -RUN mkdir -p /etc/mobilizon && chown nobody:nobody /etc/mobilizon +RUN chown nobody:nogroup /var/lib/mobilizon/timezones +RUN mkdir -p /etc/mobilizon && chown nobody:nogroup /etc/mobilizon USER nobody EXPOSE 4000 ENV MOBILIZON_DOCKER=true -COPY --from=builder --chown=nobody:nobody _build/prod/rel/mobilizon ./ +COPY --from=builder --chown=nobody:nogroup _build/prod/rel/mobilizon ./ RUN cp /releases/*/runtime.exs /etc/mobilizon/config.exs COPY docker/production/docker-entrypoint.sh ./