run docker container as non root

shadjac · Nov 30, 2018 · 4f8ac0c · 4f8ac0c
1 parent a27eab4
commit 4f8ac0c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/uid-demo-Dockerfile b/uid-demo-Dockerfile
@@ -0,0 +1,6 @@
+FROM debian:stretch
+RUN groupadd -g 999 appuser && \
+    useradd -r -u 999 -g appuser appuser
+USER appuser
+COPY secrets.txt /tmp/secrets.txt
+CMD ["cat", "/tmp/secrets.txt"]