try a build with node user

This commit is contained in:
Henry Oswald
2018-03-19 14:10:45 +00:00
parent 0915ac8c60
commit 4d955a8d41
3 changed files with 7 additions and 9 deletions

View File

@@ -19,7 +19,6 @@ WORKDIR /app
# All app and node_modules will be owned by root. # All app and node_modules will be owned by root.
# The app will run as the 'app' user, and so not have write permissions # The app will run as the 'app' user, and so not have write permissions
# on any files it doesn't need. # on any files it doesn't need.
RUN useradd --user-group --create-home --home-dir /app --shell /bin/false app
RUN ./install_deps.sh RUN ./install_deps.sh
ENTRYPOINT ["/bin/sh", "entrypoint.sh"] ENTRYPOINT ["/bin/sh", "entrypoint.sh"]

View File

@@ -5,11 +5,10 @@ echo "Changing permissions of /var/run/docker.sock for sibling containers"
chown root:docker /var/run/docker.sock chown root:docker /var/run/docker.sock
mkdir -p /app/cache mkdir -p /app/cache
chown -R app:app /app/cache chown -R node:node /app/cache
mkdir -p /app/compiles mkdir -p /app/compiles
chown -R app:app /app/compiles chown -R node:node /app/compiles
chmod -R 777 /app/compiles #TODO why do I need this?
./bin/install_texlive_gce.sh ./bin/install_texlive_gce.sh
exec runuser -u app "$@" exec runuser -u node "$@"

View File

@@ -2,12 +2,12 @@
wget -qO- https://get.docker.com/ | sh wget -qO- https://get.docker.com/ | sh
apt-get install poppler-utils vim ghostscript --yes apt-get install poppler-utils vim ghostscript --yes
npm rebuild npm rebuild
usermod -aG docker app usermod -aG docker node
mkdir -p /app/cache mkdir -p /app/cache
chown -R app:app /app/cache chown -R node:node /app/cache
mkdir -p /app/compiles mkdir -p /app/compiles
chown -R app:app /app/compiles chown -R node:node /app/compiles
chown -R app:app /app/bin/synctex chown -R node:node /app/bin/synctex