Run container as non-root user #11

Merged

lyrathorpe merged 1 commits from chore/dockerfile-non-root into main

2026-06-17 17:33:23 +01:00

Author	SHA1	Message	Date
lyrathorpe	5231b277d0	chore: run container as non-root user Build and publish container / build (pull_request) Successful in 9m17s Details Create a dedicated appuser/appuser system user and group, ensure the copied application file is owned by it, and switch to that user with USER before CMD. EXPOSE 110 25 is unchanged; ports are published via the host -p mapping, so binding them as non-root works in the default Docker network namespace without CAP_NET_BIND_SERVICE. Fixes #7 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-17 17:22:11 +01:00

Author

SHA1

Message

Date

lyrathorpe

5231b277d0

chore: run container as non-root user

Build and publish container / build (pull_request) Successful in 9m17s

Details

Create a dedicated appuser/appuser system user and group, ensure the
copied application file is owned by it, and switch to that user with
USER before CMD. EXPOSE 110 25 is unchanged; ports are published via the
host -p mapping, so binding them as non-root works in the default Docker
network namespace without CAP_NET_BIND_SERVICE.

Fixes #7

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-17 17:22:11 +01:00

Run container as non-root user #11

1 Commits