Merge pull request #2859 from Gouthamve/docker-nobody

Dockerfile: Run as nobody
2017-07-05 16:13:21 +02:00 · 2017-07-05 16:13:21 +02:00 · 24e9deac71
parent ad86c389cb b2f7c8d842
commit 24e9deac71
1 changed files with 3 additions and 0 deletions
--- a/3
+++ b/3
@ -8,7 +8,10 @@ COPY console_libraries/                     /usr/share/prometheus/console_librar
 COPY consoles/                              /usr/share/prometheus/consoles/

 RUN ln -s /usr/share/prometheus/console_libraries /usr/share/prometheus/consoles/ /etc/prometheus/
+RUN mkdir -p /prometheus && \
+    chown -R nobody:nogroup etc/prometheus /prometheus

+USER       nobody
 EXPOSE     9090
 VOLUME     [ "/prometheus" ]
 WORKDIR    /prometheus