lyrathorpe/legacy-email-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Run container as non-root user (#11)
Build and publish container / build (push) Successful in 5m59s
Details

Browse Source 
Adds a dedicated non-root user and switches to it before CMD. Verified the container runs as a non-root uid. Closes #7

Reviewed-on: #11
Co-authored-by: Lyra Thorpe <iam@emmathe.dev>
Co-committed-by: Lyra Thorpe <iam@emmathe.dev>
This commit was merged in pull request #11.
This commit is contained in:
Lyra Thorpe
2026-06-17 17:33:23 +01:00
committed by lyrathorpe
parent bde999185a
commit 7930235efd
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+6 -1
View File
@@ -3,11 +3,16 @@ FROM python:3.12-slim
WORKDIR /app WORKDIR /app
ENV PYTHONUNBUFFERED=1 ENV PYTHONUNBUFFERED=1
# Create a dedicated non-root user and group to run the proxy.
RUN groupadd --system appuser && useradd --system --gid appuser appuser
COPY requirements.txt ./ COPY requirements.txt ./
RUN pip install --no-cache-dir -r requirements.txt RUN pip install --no-cache-dir -r requirements.txt
COPY proxy_server.py ./ COPY --chown=appuser:appuser proxy_server.py ./
EXPOSE 110 25 EXPOSE 110 25
USER appuser
CMD ["python", "proxy_server.py"] CMD ["python", "proxy_server.py"]