Use user nobody in Dockerfile

Signed-off-by: Goutham Veeramachaneni <cs14btech11014@iith.ac.in>
This commit is contained in:
Goutham Veeramachaneni 2017-06-19 15:03:39 +05:30
parent 721ed3fb41
commit b2f7c8d842
No known key found for this signature in database
GPG Key ID: F1C217E8E9023CAD
1 changed files with 4 additions and 6 deletions

View File

@ -7,17 +7,15 @@ COPY documentation/examples/prometheus.yml /etc/prometheus/prometheus.yml
COPY console_libraries/ /usr/share/prometheus/console_libraries/
COPY consoles/ /usr/share/prometheus/consoles/
RUN ln -s /usr/share/prometheus/console_libraries /usr/share/prometheus/consoles/ /etc/prometheus/ && \
addgroup -g 1000 prometheus && \
adduser -s /bin/sh -S -H -u 1000 -G prometheus prometheus && \
mkdir -p /prometheus && \
chown -R prometheus:prometheus /etc/prometheus /prometheus
RUN ln -s /usr/share/prometheus/console_libraries /usr/share/prometheus/consoles/ /etc/prometheus/
RUN mkdir -p /prometheus && \
chown -R nobody:nogroup etc/prometheus /prometheus
USER nobody
EXPOSE 9090
VOLUME [ "/prometheus" ]
WORKDIR /prometheus
ENTRYPOINT [ "/bin/prometheus" ]
USER prometheus
CMD [ "-config.file=/etc/prometheus/prometheus.yml", \
"-storage.local.path=/prometheus", \
"-web.console.libraries=/usr/share/prometheus/console_libraries", \