fix: use higher uid/gid in docker image

[olevski]

This makes it so that the ui images can run with arbitrary uid/gid.

Also the nginx image is already setup to run with a bunch of things being in /tmp. The image has this in its /etc/nginx.conf file:

$ cat /etc/nginx/nginx.conf

worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /tmp/nginx.pid;


events {
    worker_connections  1024;
}


http {
    proxy_temp_path /tmp/proxy_temp;
    client_body_temp_path /tmp/client_temp;
    fastcgi_temp_path /tmp/fastcgi_temp;
    uwsgi_temp_path /tmp/uwsgi_temp;
    scgi_temp_path /tmp/scgi_temp;

This is in line with the docs about running a non-privileged image here: (see running as non root)
https://hub.docker.com/_/nginx

To test locally:

cd client
docker build -t test .
docker run -ti --rm -p 8080:8080 -u 100000:100000 test

/deploy renku=release-0.68.0

[RenkuBot]

You can access the deployment of this PR at https://renku-ci-ui-3645.dev.renku.ch

[leafty]

General comment: before the nginx process starts, everything inside the html and config folders should be made read-only. There is no reason to let files be modified since they are all static at that point.

[leafty]

I don't think a+w is acceptable, use rwxr-xr-x please.

[leafty]

Why not keep it in /app/scripts/generate_sitemap.sh?

[leafty]

Same here, rw-r--r-- permissions.

[leafty]

Why not chown /usr/share/nginx/html?