Update image to run as a non root user

[insuusvenerati]

This PR updates the image to run as a non root user. To reduce the amount of changes, I simply changed the base image to use cm2network/steamcmd:latest.

The reason for this is that https://github.com/CM2Walki/steamcmd is already configured to run as a non root user with steamcmd existing in /home/steam/steamcmd.sh and the valve wiki for SteamCMD points to it. https://developer.valvesoftware.com/wiki/SteamCMD#Docker

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[Renegade-Master]

Thanks for the contribution!

This base image looks massive though, and contains unnecessary things.
https://github.com/CM2Walki/steamcmd/blob/master/bullseye/Dockerfile

I've triggered the GH Actions though, and we'll see if that works. I would rather fix my own base image than use this at the moment however. 41 MiB -> 182 MiB is quite the leap, and I doubt any of those bytes actually help with the permissions.

[Renegade-Master]

This is promising though, because to be fair the CM2 image handles users a lot more like how I originally did, so I was probably not far off with the original implementation.

zomboid
steamcmd

[Renegade-Master]

@insuusvenerati
Some progress 🙂

Does this look correct to you? I will make similar changes to this repo, but that PR should sort out the base image.

[insuusvenerati]

@insuusvenerati Some progress slightly_smiling_face

Does this look correct to you? I will make similar changes to this repo, but that PR should sort out the base image.

I'll spin up a server with that PR tonight and check it out! At first glance, it does look good.

[Renegade-Master]

I'll spin up a server with that PR tonight and check it out! At first glance, it does look good.

It's not quite ready yet. Running into some issues.
I will probably have to start releasing "root" and "non-root" versions of the base image so that I can still install Python in this one.

Definite progress though. I now understand what I was doing wrong when I initially tried this.

[jsknnr]

Your tests are what is broken now.

Try this:

      - name: Make Docker Directories
        if: matrix.system == 'docker' || matrix.system == 'docker-compose'
        run: |
          mkdir ZomboidConfig ZomboidDedicatedServer
          sudo chown -R 1000:1000 ZomboidConfig ZomboidDedicatedServer

      - name: Make Podman Directories
        if: matrix.system == 'podman' 
        run: |
          mkdir ZomboidConfig ZomboidDedicatedServer
          podman unshare chown 1000:1000 $(pwd)/ZomboidDedicatedServer
          podman unshare chown 1000:1000 $(pwd)/ZomboidConfig