Fixing the dockerfile to run as non-root user (kserve#2687)

Signed-off-by: Chirag Patel <[email protected]> Co-authored-by: Chirag Patel <[email protected]>
zillow · Feb 13, 2023 · 3c9cafe · 3c9cafe
1 parent 9bd6375
commit 3c9cafe
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/agent.Dockerfile b/agent.Dockerfile
@@ -15,7 +15,7 @@ COPY cmd/    cmd/
 RUN CGO_ENABLED=0 GOOS=linux go build -a -o agent ./cmd/agent
 
 # Copy the inference-agent into a thin image
-FROM gcr.io/distroless/static:latest
+FROM gcr.io/distroless/static:nonroot
 COPY third_party/ third_party/
 WORKDIR /ko-app
 COPY --from=builder /go/src/github.com/kserve/kserve/agent /ko-app/

diff --git a/router.Dockerfile b/router.Dockerfile
@@ -15,7 +15,7 @@ COPY cmd/    cmd/
 RUN CGO_ENABLED=0  go build -a -o router ./cmd/router
 
 # Copy the inference-router into a thin image
-FROM gcr.io/distroless/static:latest
+FROM gcr.io/distroless/static:nonroot
 COPY third_party/ third_party/
 WORKDIR /ko-app
 COPY --from=builder /go/src/github.com/kserve/kserve/router /ko-app/

diff --git a/tools/tf2openapi/Dockerfile b/tools/tf2openapi/Dockerfile
@@ -12,7 +12,7 @@ COPY go.sum  go.sum
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o tf2openapi ./tools/tf2openapi/cmd
 
 # Copy tf2openapi into a thin image
-FROM gcr.io/distroless/static:latest
+FROM gcr.io/distroless/static:nonroot
 WORKDIR /
 COPY third_party/ third_party/
 COPY --from=builder /go/src/github.com/kserve/kserve/tf2openapi .