[misc] narrow down write access/ownership for the run-time user
This commit is contained in:
committed by
Jakob Ackermann
parent
c5d10d02fc
commit
4ee0dc2471
@@ -24,7 +24,7 @@ COPY . /app
|
||||
FROM base
|
||||
|
||||
COPY --from=app /app /app
|
||||
RUN mkdir -p db \
|
||||
&& chown node:node db
|
||||
RUN mkdir -p cache compiles db \
|
||||
&& chown node:node cache compiles db
|
||||
|
||||
CMD ["node", "--expose-gc", "app.js"]
|
||||
|
||||
Reference in New Issue
Block a user