mirror of
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git
synced 2025-10-13 20:11:19 -04:00
Merge branch 'docker-nonroot' into 'main'
chore: Dockerfile: run proxy as non-root user See merge request tpo/anti-censorship/pluggable-transports/snowflake!455
This commit is contained in:
commit
37541868c5
1 changed files with 7 additions and 0 deletions
|
@ -8,8 +8,15 @@ WORKDIR /app/proxy
|
||||||
RUN go get
|
RUN go get
|
||||||
RUN CGO_ENABLED=0 go build -o proxy -ldflags '-extldflags "-static" -w -s' .
|
RUN CGO_ENABLED=0 go build -o proxy -ldflags '-extldflags "-static" -w -s' .
|
||||||
|
|
||||||
|
RUN groupadd nonroot
|
||||||
|
RUN useradd --gid nonroot nonroot
|
||||||
|
|
||||||
FROM scratch
|
FROM scratch
|
||||||
|
|
||||||
|
COPY --from=build /etc/passwd /etc/passwd
|
||||||
|
COPY --from=build /etc/group /etc/group
|
||||||
|
USER nonroot:nonroot
|
||||||
|
|
||||||
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
||||||
COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo
|
COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo
|
||||||
COPY --from=build /usr/share/tor/geoip* /usr/share/tor/
|
COPY --from=build /usr/share/tor/geoip* /usr/share/tor/
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue