feat: re-add non-root docker user #207

seriousm4x · Sep 18, 2023 · b67933a · b67933a
1 parent ec01f35
commit b67933a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -8,7 +8,10 @@ WORKDIR /app
 RUN wget https://github.com/seriousm4x/UpSnap/releases/download/${VERSION}/UpSnap_${VERSION}_${BUILDX_ARCH}.zip &&\
     unzip UpSnap_${VERSION}_${BUILDX_ARCH}.zip &&\
     rm -f UpSnap_${VERSION}_${BUILDX_ARCH}.zip &&\
-    chmod +x upsnap
+    chmod +x upsnap &&\
+    apk update &&\
+    apk add --no-cache libcap &&\
+    setcap 'cap_net_raw=+ep' ./upsnap
 
 FROM alpine:3
 RUN apk update &&\

diff --git a/Dockerfile.dev b/Dockerfile.dev
@@ -11,7 +11,10 @@ COPY backend/ .
 COPY --from=node /app/build ./pb_public
 ENV CGO_ENABLED=0
 RUN go build -o upsnap main.go &&\
-    chmod +x upsnap
+    chmod +x upsnap &&\
+    apk update &&\
+    apk add --no-cache libcap &&\
+    setcap 'cap_net_raw=+ep' ./upsnap
 
 FROM alpine:3
 RUN apk update &&\