change the dockerimage to run the process as node user

This commit is contained in:
Andreas Peters 2018-07-23 17:38:30 +02:00
parent e9cebd38ad
commit 6bf9b7d53c

View file

@ -2,19 +2,34 @@ FROM alpine:edge
LABEL maintainer="Andreas Peters <support@aventer.biz>" LABEL maintainer="Andreas Peters <support@aventer.biz>"
COPY ./ /home/node
RUN echo http://nl.alpinelinux.org/alpine/edge/testing >> /etc/apk/repositories && \ RUN echo http://nl.alpinelinux.org/alpine/edge/testing >> /etc/apk/repositories && \
apk add --no-cache git nodejs npm tini websockify apk add --no-cache git nodejs npm tini websockify && \
adduser -D -g 1001 -u 1001 -h /home/node node && \
mkdir -p /home/node && \
mkdir -p /home/node/.npm-global && \
mkdir -p /home/node/app && \
chown -R node: /home/node
COPY ./ /opt/mumble-web/ USER node
WORKDIR /opt/mumble-web ENV PATH=/home/node/.npm-global/bin:$PATH
ENV NPM_CONFIG_PREFIX=/home/node/.npm-global
RUN cd /home/node && \
npm install && \
npm run build
RUN npm install && npm run build USER root
EXPOSE 80 RUN apk del gcc git make g++
USER node
EXPOSE 8080
ENV MUMBLE_SERVER=mumble.aventer.biz:64738 ENV MUMBLE_SERVER=mumble.aventer.biz:64738
ENTRYPOINT ["/sbin/tini", "--"] ENTRYPOINT ["/sbin/tini", "--"]
CMD websockify --ssl-target --web /opt/mumble-web/dist 80 "$MUMBLE_SERVER" CMD websockify --ssl-target --web /home/node/dist 8080 "$MUMBLE_SERVER"