Dockerfile: define numeric user to run unprivileged

kubernetes-sigs · Jan 30, 2023 · 7d7235a · 7d7235a
1 parent dd40312
commit 7d7235a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -21,8 +21,8 @@ FROM ${BASE_IMAGE_FULL} as full
 COPY --from=builder /workspace/node-feature-discovery-operator /
 COPY --from=builder /workspace/build/assets /opt/nfd
 
-RUN useradd nfd-operator
-USER nfd-operator
+# Run as unprivileged user
+USER 65534:65534
 
 ENTRYPOINT ["/node-feature-discovery-operator"]
 LABEL io.k8s.display-name="node-feature-discovery-operator"