mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2026-05-14 05:41:29 +00:00
docker: default published images to seaweed user (#8819)
* ci: add Trivy CVE scan to container release workflow
* docker: default published images to seaweed user
* Revert "ci: add Trivy CVE scan to container release workflow"
This reverts commit bc9b7e1cf7.
This commit is contained in:
@@ -79,5 +79,9 @@ RUN mkdir -p /data/filerldb2 && \
|
||||
VOLUME /data
|
||||
WORKDIR /data
|
||||
|
||||
# Entrypoint will handle permission fixes and user switching
|
||||
# Run as non-root by default (satisfies security scanners).
|
||||
# Use `docker run --user root` if you need the entrypoint to fix
|
||||
# /data volume ownership before dropping privileges.
|
||||
USER seaweed
|
||||
|
||||
ENTRYPOINT ["/entrypoint.sh"]
|
||||
|
||||
@@ -37,5 +37,9 @@ RUN mkdir -p /data/filerldb2 && \
|
||||
VOLUME /data
|
||||
WORKDIR /data
|
||||
|
||||
# Entrypoint will handle permission fixes and user switching
|
||||
# Run as non-root by default (satisfies security scanners).
|
||||
# Use `docker run --user root` if you need the entrypoint to fix
|
||||
# /data volume ownership before dropping privileges.
|
||||
USER seaweed
|
||||
|
||||
ENTRYPOINT ["/entrypoint.sh"]
|
||||
|
||||
Reference in New Issue
Block a user