Creates non root user to run Meilisearch in Dockerfile

This commit is contained in:
gaul@pdx.edu 2021-10-02 10:42:13 -07:00
parent 81993b6a15
commit 4009804221

View File

@ -35,12 +35,18 @@ RUN $HOME/.cargo/bin/cargo build --release
# Run # Run
FROM alpine:3.14 FROM alpine:3.14
RUN apk add -q --no-cache libgcc tini curl ARG USER=meiliuser
ENV HOME /home/$USER
ENV MEILI_HTTP_ADDR 0.0.0.0:7700
# download runtime deps as root and create $USER
RUN apk add -q --no-cache libgcc tini curl \
&& adduser -D $USER
WORKDIR $HOME
USER $USER
# copy file as $USER to $HOME
COPY --from=compiler /meilisearch/target/release/meilisearch . COPY --from=compiler /meilisearch/target/release/meilisearch .
ENV MEILI_HTTP_ADDR 0.0.0.0:7700
EXPOSE 7700/tcp EXPOSE 7700/tcp
ENTRYPOINT ["tini", "--"] CMD ["tini", "--","./meilisearch"]
CMD ./meilisearch