From 43a3ded32980309bd15e32f16d5c9cc3bf2f1fe5 Mon Sep 17 00:00:00 2001
From: Janne Mareike Koschinski <janne@kuschku.de>
Date: Wed, 6 Apr 2022 18:14:46 +0200
Subject: [PATCH] feat: non-root user

---
 Dockerfile | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a7e4614..b1374ec 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,9 +15,16 @@ RUN wget https://www.languagetool.org/download/LanguageTool-$VERSION.zip && \
 
 FROM openjdk:16-slim-buster
 ARG VERSION
-COPY --from=builder /LanguageTool-$VERSION /languagetool
-COPY --from=builder /fastText/fasttext /languagetool/fasttext
+
+RUN addgroup --system --gid 1000 languagetool && \
+    adduser --system --ingroup languagetool --uid 1000 --shell /bin/sh --home /languagetool --no-create-home languagetool
+
+USER languagetool
+
+COPY --chown=languagetool:languagetool --from=builder /LanguageTool-$VERSION /languagetool
+COPY --chown=languagetool:languagetool --from=builder /fastText/fasttext /languagetool/fasttext
 
 WORKDIR /languagetool
 
+
 ENTRYPOINT [ "java", "-cp", "languagetool-server.jar", "org.languagetool.server.HTTPServer" ]
-- 
GitLab