From 2fc979a8451e10cf85c4628fae52119f60b66224 Mon Sep 17 00:00:00 2001
From: brb <brb@esoft.com>
Date: Thu, 6 Jul 2023 17:28:38 +0200
Subject: [PATCH] updated to run as user instead of root

---
 Dockerfile | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index b8f5d7d..b3256cf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -24,10 +24,12 @@ RUN pip wheel --no-cache-dir --no-deps --wheel-dir /usr/src/app/wheels -r requir
 # pull official base image
 FROM dvcorg/cml:0-dvc2-base1-gpu
 
-# create app home
-ENV APP_HOME = /home/app
-RUN mkdir -p $APP_HOME
-WORKDIR $APP_HOME
+# create home directory and app user
+RUN mkdir -p /home/app && \
+    addgroup --system app && \
+    adduser --system --group app
+
+# add folder to store repo in
 RUN mkdir -p /home/app/repo
 
 # install packages from builder
@@ -36,7 +38,14 @@ COPY --from=builder /usr/src/app/requirements.txt requirements.txt
 RUN pip install --no-cache /wheels/*
 
 # copy in files
+WORKDIR /home/app
 COPY ./code .
 
+# change ownership to app user
+RUN chown -R app:app /home/app
+
+# change to the app user
+USER app
+
 # start execution
 ENTRYPOINT [ "python", "main.py" ]
\ No newline at end of file