From 1cfdaa4a37a4be3f6e21f99b0f3b4e9f3a0aa955 Mon Sep 17 00:00:00 2001
From: Christopher Baklid <christopherb@unity3d.com>
Date: Mon, 28 May 2018 10:51:53 +0200
Subject: run as non-priv user in snekbox

---
 docker/Dockerfile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 88d1919..cb25d34 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -2,6 +2,7 @@ FROM python:3.6-alpine3.7
 
 RUN apk add --update tini
 RUN apk add --update build-base
+RUN addgroup -g 1000 -S snek && adduser -u 1000 -S snek -G snek
 
 ENV PIPENV_VENV_IN_PROJECT=1
 ENV PIPENV_IGNORE_VIRTUALENVS=1
@@ -19,5 +20,8 @@ WORKDIR /snekbox
 
 RUN pipenv sync
 
+RUN chown -R snek:snek /snekbox
+USER snek
+
 ENTRYPOINT ["/sbin/tini", "--"]
 CMD ["pipenv", "run", "snekbox"]
-- 
cgit v1.2.3