run Docker image as non-root

EIG6-ArtificIA · Feb 13, 2024 · 8f7e0aa · 8f7e0aa
1 parent 3cf07be
commit 8f7e0aa
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Dockerfile.prod b/Dockerfile.prod
@@ -31,5 +31,9 @@ RUN apk add --no-cache bash
 # Make our shell script executable
 RUN chmod +x env.sh
 
+# change to non-root user
+USER node
+RUN chown -R node:node /usr/share/nginx/html
+
 # Start Nginx server
 CMD ["/bin/bash", "-c", "/usr/share/nginx/html/env.sh && nginx -g \"daemon off;\""]