Skip to content

Commit a020629

Browse files
committed
Fix appuser: pin UID/GID 1000 to match previous image ownership
1 parent cb3e5f9 commit a020629

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

FSTService/Dockerfile

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,8 +39,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
3939
libglib2.0-0t64 libxkbcommon0 libgl1 libfreetype6 libdbus-1-3 \
4040
&& rm -rf /var/lib/apt/lists/*
4141

42-
# Create non-root user for container hardening
43-
RUN useradd --no-create-home --home-dir /app --shell /usr/sbin/nologin appuser
42+
# Create non-root user for container hardening (UID 1000 matches the previous
43+
# Debian-based image so existing volume files remain writable).
44+
RUN groupadd --gid 1000 appuser && \
45+
useradd --uid 1000 --gid 1000 --no-create-home --home-dir /app --shell /usr/sbin/nologin appuser
4446

4547
# Download CHOpt CLI for path generation (Linux x64) — pinned in tools/chopt-cli-linux/
4648
COPY tools/chopt-cli-linux/ /app/tools/

0 commit comments

Comments
 (0)