github/sim
1
0
Fork 0
mirror of https://github.com/simstudioai/sim.git synced 2026-01-09 15:07:55 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix(docker): updated docker to use non-root user for k8s/helm deployments (#1626)

Browse Source 
* fix(docker): updated docker to use non-root user for k8s/helm deployments

* ack PR comments
This commit is contained in:
Waleed
2025-10-14 15:54:51 -07:00
committed by GitHub
parent f147eaee1c
commit f345c4d1d8
3 changed files with 42 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
docker/db.Dockerfile
View File

@@ -17,9 +17,16 @@ RUN bun install --ignore-scripts
FROM oven/bun:1.2.22-alpine AS runner
WORKDIR /app
# Create non-root user and group
RUN addgroup -g 1001 -S nodejs && \
adduser -S nextjs -u 1001
# Copy only the necessary files from deps
COPY --from=deps /app/node_modules ./node_modules
COPY packages/db/drizzle.config.ts ./packages/db/drizzle.config.ts
COPY packages/db ./packages/db
COPY --from=deps --chown=nextjs:nodejs /app/node_modules ./node_modules
COPY --chown=nextjs:nodejs packages/db/drizzle.config.ts ./packages/db/drizzle.config.ts
COPY --chown=nextjs:nodejs packages/db ./packages/db
# Switch to non-root user
USER nextjs
WORKDIR /app/packages/db