From ce7496aec97d00a055077301b83618f85cfb661d Mon Sep 17 00:00:00 2001 From: Robert Beal Date: Fri, 13 Oct 2017 21:26:39 +0100 Subject: docker: allow setting UID and GID when running a container (#4776) * Allow setting the UID and GID when running a docker container via shadow * Disable password login via usermod (fix leaving user in insecure state) --- Dockerfile.rpi | 24 +++++++++++++++++++----- 1 file changed, 19 insertions(+), 5 deletions(-) (limited to 'Dockerfile.rpi') diff --git a/Dockerfile.rpi b/Dockerfile.rpi index 3a53b76f..51d5fbd7 100644 --- a/Dockerfile.rpi +++ b/Dockerfile.rpi @@ -3,20 +3,34 @@ FROM armhf/alpine:3.5 # Install system utils & Gogs runtime dependencies ADD https://github.com/tianon/gosu/releases/download/1.9/gosu-armhf /usr/sbin/gosu RUN chmod +x /usr/sbin/gosu \ - && apk --no-cache --no-progress add ca-certificates bash git linux-pam s6 curl openssh socat tzdata + && echo http://dl-2.alpinelinux.org/alpine/edge/community/ >> /etc/apk/repositories \ + && apk --no-cache --no-progress add \ + bash \ + ca-certificates \ + curl \ + git \ + linux-pam \ + openssh \ + s6 \ + shadow \ + socat \ + tzdata ENV GOGS_CUSTOM /data/gogs -COPY . /app/gogs/build +# Configure LibC Name Service +COPY docker/nsswitch.conf /etc/nsswitch.conf +COPY docker /app/gogs/docker +COPY templates /app/gogs/templates +COPY public /app/gogs/public + WORKDIR /app/gogs/build +COPY . . RUN ./docker/build-go.sh \ && ./docker/build.sh \ && ./docker/finalize.sh -# Configure LibC Name Service -COPY docker/nsswitch.conf /etc/nsswitch.conf - # Configure Docker Container VOLUME ["/data"] EXPOSE 22 3000 -- cgit v1.2.3