Modified Dockerfile to run as non-root

template/python3-debian/Dockerfile

@@ -2,25 +2,38 @@ FROM python:3
 
 RUN curl -sSL https://github.com/openfaas/faas/releases/download/0.9.6/fwatchdog > /usr/bin/fwatchdog \
     && chmod +x /usr/bin/fwatchdog
-WORKDIR /root/
+
+# Add non root user
+RUN adduser app --system --group
+
+WORKDIR /home/app/
 
 COPY index.py           .
 COPY requirements.txt   .
-RUN pip install -r requirements.txt
+
+RUN chown -R app /home/app
+
+USER app
+ENV PATH=$PATH:/home/app/.local/bin
+RUN pip install --user -r requirements.txt
 
 RUN mkdir -p function
 RUN touch ./function/__init__.py
-WORKDIR /root/function/
+
+WORKDIR /home/app/function/
 COPY function/requirements.txt	.
-RUN pip install -r requirements.txt
+RUN pip install --user -r requirements.txt
 
-WORKDIR /root/
-COPY function           function
+WORKDIR /home/app
 
-WORKDIR /root/
+USER root
+COPY function           function
+RUN chown -R app:app ./
+USER app
 
 ENV fprocess="python3 index.py"
+EXPOSE 8080
 
-HEALTHCHECK --interval=1s CMD [ -e /tmp/.lock ] || exit 1
+HEALTHCHECK --interval=3s CMD [ -e /tmp/.lock ] || exit 1
 
 CMD ["fwatchdog"]