Don't run as root in the container
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
d9faf25648
commit
a944e8b149
@ -29,10 +29,13 @@ FROM alpine:latest
|
|||||||
|
|
||||||
RUN apk --no-cache add --update git
|
RUN apk --no-cache add --update git
|
||||||
|
|
||||||
|
RUN useradd --create-home hoc
|
||||||
|
WORKDIR /home/hoc
|
||||||
|
|
||||||
# once we don't need a git binary anymore, this should be enough
|
# once we don't need a git binary anymore, this should be enough
|
||||||
# FROM scratch
|
# FROM scratch
|
||||||
# COPY --from=linuxkit/ca-certificates:v0.7 / /
|
# COPY --from=linuxkit/ca-certificates:v0.7 / /
|
||||||
|
|
||||||
COPY --from=builder /home/rust/src/target/x86_64-unknown-linux-musl/release/hoc /hoc
|
COPY --from=builder /home/rust/src/target/x86_64-unknown-linux-musl/release/hoc .
|
||||||
|
|
||||||
ENTRYPOINT ["/hoc"]
|
ENTRYPOINT ["/home/hoc/hoc"]
|
||||||
|
@ -6,7 +6,7 @@ services:
|
|||||||
# image: local/hoc:latest
|
# image: local/hoc:latest
|
||||||
image: registry.gitlab.com/vbrandl/hoc:latest
|
image: registry.gitlab.com/vbrandl/hoc:latest
|
||||||
volumes:
|
volumes:
|
||||||
- ./repos:/repos
|
- ./repos:/home/hoc/repos
|
||||||
- ./cache:/cache
|
- ./cache:/home/hoc/cache
|
||||||
ports:
|
ports:
|
||||||
- "127.0.0.1:8080:8080"
|
- "127.0.0.1:8080:8080"
|
||||||
|
Loading…
Reference in New Issue
Block a user