Hashar has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/383160 )
Change subject: docker: run as user nobody
......................................................................
docker: run as user nobody
Change-Id: I86e5f8c9690edaf2c772c1c2ab2e8d1fc3334422
---
M Dockerfile
1 file changed, 5 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/integration/quibble
refs/changes/60/383160/1
diff --git a/Dockerfile b/Dockerfile
index a6f765a..ce456c8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -32,3 +32,8 @@
RUN cd /opt/quibble && \
python3 setup.py install && \
rm -fR /opt/quibble
+
+# Unprivileged
+RUN install --directory /workspace --owner=nobody --group=nogroup
+USER nobody
+WORKDIR /workspace
--
To view, visit https://gerrit.wikimedia.org/r/383160
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I86e5f8c9690edaf2c772c1c2ab2e8d1fc3334422
Gerrit-PatchSet: 1
Gerrit-Project: integration/quibble
Gerrit-Branch: master
Gerrit-Owner: Hashar <has...@free.fr>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
