Merge pull request #177 from ArangoGutierrez/helm_charts

Dockerfile: define numeric user to run unprivileged
kubernetes-sigs · Jan 31, 2023 · fa6e4e3 · fa6e4e3
2 parents 180644f + 7d7235a
commit fa6e4e3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.gitignore b/.gitignore
@@ -24,4 +24,4 @@ testbin/*
 *.swo
 *~
 .vscode/*
-node-feature-discovery-operator
+./node-feature-discovery-operator
diff --git a/Dockerfile b/Dockerfile
@@ -21,8 +21,8 @@ FROM ${BASE_IMAGE_FULL} as full
 COPY --from=builder /workspace/node-feature-discovery-operator /
 COPY --from=builder /workspace/build/assets /opt/nfd
 
-RUN useradd nfd-operator
-USER nfd-operator
+# Run as unprivileged user
+USER 65534:65534
 
 ENTRYPOINT ["/node-feature-discovery-operator"]
 LABEL io.k8s.display-name="node-feature-discovery-operator"