steve
/
geoserver
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #52 from buehner/additional-lib-permissions 

fix: do not run as custom user
pull/53/head
Nils Bühner 2024-02-21 09:09:50 +01:00 committed by GitHub
parent 4eb3cdab3b ee3f7df6eb
commit dbbbcea453
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Dockerfile
View File

@ -142,15 +142,7 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
# GeoServer user => restrict access to $CATALINA_HOME and GeoServer directories # GeoServer user => restrict access to $CATALINA_HOME and GeoServer directories
# See also CIS Docker benchmark and docker best practices # See also CIS Docker benchmark and docker best practices
RUN chmod +x /opt/*.sh \ RUN chmod +x /opt/*.sh
&& groupadd geoserver \
&& useradd --no-log-init -u 2000 -r -g geoserver geoserver \
&& chown -R geoserver:geoserver $CATALINA_HOME \
&& chmod g-w,o-rwx $CATALINA_HOME \
&& chown -R geoserver:geoserver $GEOSERVER_DATA_DIR \
&& chown -R geoserver:geoserver $GEOSERVER_LIB_DIR
USER geoserver
ENTRYPOINT ["/opt/startup.sh"] ENTRYPOINT ["/opt/startup.sh"]