Commit 2338eb68 authored by Christophe Benz's avatar Christophe Benz
Browse files

Docker: run service under non-root user...

due to chromium --headless limitation
parent e5d0abd3
......@@ -8,6 +8,14 @@ RUN pip install --no-cache-dir gunicorn==19.9.0
RUN apt-get update && \
apt-get install --yes chromium=73.0.3683.75-1~deb9u1
ARG user=jenkins
ARG group=jenkins
ARG uid=1000
ARG gid=1000
RUN groupadd -g ${gid} ${group} && \
useradd -u ${uid} -g ${gid} --no-create-home --shell /bin/bash ${user}
COPY requirements.txt .
......@@ -16,4 +24,7 @@ RUN pip install --no-cache-dir --requirement requirements.txt
COPY . .
RUN pip install --no-cache-dir --editable .
# Cf
USER ${user}
CMD gunicorn --bind validata_ui:app
\ No newline at end of file
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment