Update Quarkus Dockerfile to run as non-root (#778)

* Update quarkus Dockerfile to run as non-root * Incrimented stack version Co-authored-by: Kamran Shamsi <[email protected]>
appsody · May 1, 2020 · 96bd1f7 · 96bd1f7
1 parent e31befe
commit 96bd1f7
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 3 deletions.
diff --git a/incubator/quarkus/image/project/Dockerfile b/incubator/quarkus/image/project/Dockerfile
@@ -18,6 +18,16 @@ FROM registry.access.redhat.com/ubi8/ubi-minimal
 
 WORKDIR /work/
 COPY --from=build /project/user-app/target/*-runner /work/application
-RUN chmod 775 /work
+
+USER root
+RUN microdnf -y install shadow-utils \
+    && microdnf clean all ;\
+    useradd -r -g 0 -s /usr/sbin/nologin quarkus
+
+RUN chown -R quarkus /work
+RUN chmod -R g+w /work
+
+
+USER quarkus
 EXPOSE 8080
 CMD ["./application", "-Dquarkus.http.host=0.0.0.0"]
diff --git a/incubator/quarkus/image/project/pom.xml b/incubator/quarkus/image/project/pom.xml
@@ -4,7 +4,7 @@
 
     <groupId>dev.appsody</groupId>
     <artifactId>quarkus</artifactId>
-    <version>0.3.1</version>
+    <version>0.3.2</version>
     <packaging>pom</packaging>
 
     <properties>

diff --git a/incubator/quarkus/stack.yaml b/incubator/quarkus/stack.yaml
@@ -1,5 +1,5 @@
 name: Quarkus
-version: 0.3.1
+version: 0.3.2
 description: Quarkus runtime for running Java applications
 license: Apache-2.0
 language: java