run as kubeshot user

4ARMED · Jan 17, 2024 · 3b4117c · 3b4117c
1 parent 4c3e596
commit 3b4117c
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/build/Dockerfile b/build/Dockerfile
@@ -33,8 +33,14 @@ RUN \
   # headful mode support, for example: $ xvfb-run chromium-browser --remote-debugging-port=9222
   xvfb \
   # cleanup
-  && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* 
+  && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+RUN useradd -u 1001 -m -s /bin/bash kubeshot
 
 COPY --from=build /go/bin/kubeshot /usr/local/bin/kubeshot
 
 WORKDIR /data
+
+RUN chown kubeshot:kubeshot /data
+
+USER kubeshot