ignore existing logs while building; non-root docker user

TartuNLP · Sep 13, 2021 · 76fb14a · 76fb14a
1 parent 8c22407
commit 76fb14a
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -11,7 +11,13 @@ RUN python -c "import nltk; nltk.download(\"punkt\"); nltk.download(\"cmudict\")
 SHELL ["/bin/bash", "-c"]
 
 WORKDIR /app
-COPY . .
+RUN adduser --disabled-password --gecos "app" app && \
+    chown -R app:app /app && \
+    chown -R app:app /opt/conda/envs/nmt
+
+USER app
+
+COPY --chown=app:app . .
 
 ENV WORKER_NAME=""
 RUN echo "python nmt_worker.py --worker \$WORKER_NAME" > entrypoint.sh