diff --git a/Dockerfile b/Dockerfile index 75b824a..e927cf6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,6 +22,9 @@ RUN npm i --production COPY --from=build-deps /usr/src/app/build /usr/src/app/public COPY /server ./ -USER node +# USER 1000 is the "node" user +# This is to avoid the "container has runAsNonRoot and image has non-numeric user (node), cannot verify user is non-root" +# in clusters with PSP enabled +USER 1000 ENTRYPOINT ["/sbin/tini", "--", "node", "."]