Update Dockerfile to run process as non-privileged user. (#3709)

LemmyNet · Jul 24, 2023 · 13a866a · 13a866a
1 parent 102124b
commit 13a866a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docker/Dockerfile b/docker/Dockerfile
@@ -37,4 +37,9 @@ RUN apk add --no-cache libpq
 # Copy resources
 COPY --from=builder /app/lemmy_server /app/lemmy
 
+# Create non-privileged user
+RUN adduser -h /app -s sh -S -u 1000 lemmy
+RUN chown -R lemmy /app
+USER lemmy
+
 CMD ["/app/lemmy"]