ON-14865: Fix RunAsNonRoot preflight check

Set the controller and Device Plugin user to 1001. Reported-by: Peter Colledge <peter.colledge@amd.com>
Xilinx-CNS · Oct 11, 2023 · 0261bf6 · 0261bf6
1 parent ad6fc6c
commit 0261bf6
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -33,6 +33,6 @@ FROM registry.access.redhat.com/ubi8/ubi-micro:8.8
 WORKDIR /
 COPY --from=builder /workspace/manager .
 COPY --from=builder /workspace/LICENSE /licenses/LICENSE
-USER 65532:65532
+USER 1001
 
 ENTRYPOINT ["/manager"]
diff --git a/deviceplugin.Dockerfile b/deviceplugin.Dockerfile
@@ -25,4 +25,6 @@ FROM registry.access.redhat.com/ubi8/ubi-minimal:8.8
 RUN microdnf install -y lshw-B.02.19.2 && microdnf clean all
 COPY --from=builder /app/bin/onload-device-plugin /app/bin/onload-worker /usr/bin/
 COPY --from=builder /app/LICENSE /licenses/LICENSE
+USER 1001
+
 CMD ["/usr/bin/onload-device-plugin"]