[docker] Run application in rootless mode (ISH-319)
This commit is contained in:
parent
a17da9d526
commit
039d46477a
1 changed files with 2 additions and 0 deletions
|
@ -48,6 +48,7 @@ RUN dotnet publish --no-restore -c Release -a $TARGETARCH -o /app -p:EnableAOT=t
|
||||||
FROM mcr.microsoft.com/dotnet/aspnet:8.0-jammy-chiseled AS image-aot
|
FROM mcr.microsoft.com/dotnet/aspnet:8.0-jammy-chiseled AS image-aot
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
COPY --from=builder-aot /app .
|
COPY --from=builder-aot /app .
|
||||||
|
USER app
|
||||||
ENTRYPOINT ["./Iceshrimp.Backend", "--environment", "Production", "--migrate-and-start"]
|
ENTRYPOINT ["./Iceshrimp.Backend", "--environment", "Production", "--migrate-and-start"]
|
||||||
|
|
||||||
# Enable globalization and time zones:
|
# Enable globalization and time zones:
|
||||||
|
@ -56,4 +57,5 @@ ENTRYPOINT ["./Iceshrimp.Backend", "--environment", "Production", "--migrate-and
|
||||||
FROM mcr.microsoft.com/dotnet/aspnet:8.0-alpine-composite AS image-jit
|
FROM mcr.microsoft.com/dotnet/aspnet:8.0-alpine-composite AS image-jit
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
COPY --from=builder-jit /app .
|
COPY --from=builder-jit /app .
|
||||||
|
USER app
|
||||||
ENTRYPOINT ["./Iceshrimp.Backend", "--environment", "Production", "--migrate-and-start"]
|
ENTRYPOINT ["./Iceshrimp.Backend", "--environment", "Production", "--migrate-and-start"]
|
||||||
|
|
Loading…
Add table
Reference in a new issue