lyrathorpe
7930235efd
Build and publish container / build (push) Successful in 5m59s
Adds a dedicated non-root user and switches to it before CMD. Verified the container runs as a non-root uid. Closes #7 Reviewed-on: #11 Co-authored-by: Lyra Thorpe <iam@emmathe.dev> Co-committed-by: Lyra Thorpe <iam@emmathe.dev>
19 lines
385 B
Docker
19 lines
385 B
Docker
FROM python:3.12-slim
|
|
|
|
WORKDIR /app
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# Create a dedicated non-root user and group to run the proxy.
|
|
RUN groupadd --system appuser && useradd --system --gid appuser appuser
|
|
|
|
COPY requirements.txt ./
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
COPY --chown=appuser:appuser proxy_server.py ./
|
|
|
|
EXPOSE 110 25
|
|
|
|
USER appuser
|
|
|
|
CMD ["python", "proxy_server.py"]
|