jacobpascual/postgres_exporter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Docker file added multistage build to add non-root user running under ID:20001 for image.

Browse Source 
Reduces attack surface by not running image as root user
This commit is contained in:
Janis Orlovs
2019-02-16 00:36:08 +02:00
committed by Will Rouesnel
parent 85c31524f6
commit 06781103f0
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Dockerfile
View File

@@ -1,5 +1,11 @@
FROM debian:7.11-slim
RUN useradd -u 20001 postgres_exporter
FROM scratch
COPY --from=0 /etc/passwd /etc/passwd
USER postgres_exporter
ARG binary
COPY $binary /postgres_exporter