From b8710d6c4590593b1af1dd035cd5c4c457306d31 Mon Sep 17 00:00:00 2001 From: Scott Hansen Date: Sun, 12 Jan 2020 16:22:09 -0800 Subject: [PATCH] Run wtfutil in Docker as unprivileged user --- Dockerfile | 6 +++++- README.md | 3 +++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 46dc3ecd..8865afb4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -18,5 +18,9 @@ ENV PATH=$PATH:./bin RUN make build FROM alpine + COPY --from=build /go/src/github.com/wtfutil/wtf/bin/wtfutil /usr/local/bin/ -ENTRYPOINT "wtfutil" +RUN adduser -h /config -DG users -u 20000 wtf + +USER wtf +ENTRYPOINT ["wtfutil"] diff --git a/README.md b/README.md index 8e418c5e..eab37e2f 100644 --- a/README.md +++ b/README.md @@ -133,6 +133,9 @@ docker build --build-args=version=v0.25.0 -t wtfutil . # run the container docker run -it wtfutil + +# run container with a local config file +docker run -it -v path/to/config.yml:/config/config.yml wtfutil --config=/config/config.yml ``` ## Communication