Skip to content

Commit 84e6bbb

Browse files
ci: run as non-root user with dumb-init
1 parent d1dd50c commit 84e6bbb

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

Dockerfile

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,9 +28,11 @@ RUN rm -r scripts
2828
# Create deploy-image:
2929
FROM node:22-alpine
3030

31-
RUN apk add --no-cache fontconfig alsa-lib
31+
RUN apk add --no-cache fontconfig alsa-lib dumb-init
3232

3333
COPY --from=builder /src /src
3434

35+
# Run as non-root user
36+
USER 1000
3537
WORKDIR /src/packages/input-gateway
36-
ENTRYPOINT ["node", "dist/index.js"]
38+
ENTRYPOINT ["/usr/bin/dumb-init", "--", "node", "dist/index.js"]

0 commit comments

Comments
 (0)