run as nobody (#1586)

Signed-off-by: Jonathon <jonathon@insidersbyte.com>
prometheus · Oct 17, 2018 · f297445 · f297445
1 parent a194042
commit f297445
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -5,6 +5,10 @@ COPY amtool                       /bin/amtool
 COPY alertmanager                 /bin/alertmanager
 COPY examples/ha/alertmanager.yml /etc/alertmanager/alertmanager.yml
 
+RUN mkdir -p /alertmanager && \
+    chown -R nobody:nogroup etc/alertmanager /alertmanager
+
+USER       nobody
 EXPOSE     9093
 VOLUME     [ "/alertmanager" ]
 WORKDIR    /alertmanager