mirror of
https://github.com/woodpecker-ci/woodpecker.git
synced 2025-04-27 11:21:01 +00:00
Fix fs owner in scratch-based container images (#4961)
This commit is contained in:
parent
5763ae26e4
commit
99198d51d9
@ -2,8 +2,7 @@ FROM --platform=$BUILDPLATFORM docker.io/golang:1.24 AS build
|
||||
|
||||
RUN groupadd -g 1000 woodpecker && \
|
||||
useradd -u 1000 -g 1000 woodpecker && \
|
||||
mkdir -p /etc/woodpecker && \
|
||||
chown -R woodpecker:woodpecker /etc/woodpecker
|
||||
mkdir -p /etc/woodpecker
|
||||
|
||||
WORKDIR /src
|
||||
COPY . .
|
||||
@ -22,7 +21,7 @@ EXPOSE 3000
|
||||
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
||||
# copy agent binary
|
||||
COPY --from=build /src/dist/woodpecker-agent /bin/
|
||||
COPY --from=build /etc/woodpecker /etc
|
||||
COPY --from=build --chown=woodpecker:woodpecker /etc/woodpecker /etc
|
||||
COPY --from=build /etc/passwd /etc/passwd
|
||||
COPY --from=build /etc/group /etc/group
|
||||
|
||||
|
@ -2,8 +2,7 @@ FROM --platform=$BUILDPLATFORM docker.io/golang:1.24 AS build
|
||||
|
||||
RUN groupadd -g 1000 woodpecker && \
|
||||
useradd -u 1000 -g 1000 woodpecker && \
|
||||
mkdir -p /var/lib/woodpecker && \
|
||||
chown -R woodpecker:woodpecker /var/lib/woodpecker
|
||||
mkdir -p /var/lib/woodpecker
|
||||
|
||||
FROM scratch
|
||||
ARG TARGETOS TARGETARCH
|
||||
@ -20,7 +19,7 @@ COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certifica
|
||||
COPY dist/server/${TARGETOS}_${TARGETARCH}/woodpecker-server /bin/
|
||||
COPY --from=build /etc/passwd /etc/passwd
|
||||
COPY --from=build /etc/group /etc/group
|
||||
COPY --from=build /var/lib/woodpecker /var/lib/woodpecker
|
||||
COPY --from=build --chown=woodpecker:woodpecker /var/lib/woodpecker /var/lib/woodpecker
|
||||
|
||||
USER woodpecker
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user