running as bitwarden user

util/Attachments/Dockerfile

@@ -1,7 +1,11 @@
 FROM bitwarden/server
 
+USER bitwarden
 EXPOSE 80
-
 COPY entrypoint.sh /
+
+USER root
 RUN chmod +x /entrypoint.sh
+
+USER bitwarden
 ENTRYPOINT ["/entrypoint.sh"]

util/MsSql/Dockerfile

@@ -1,18 +1,26 @@
 FROM microsoft/mssql-server-linux:2017-CU4
 
+USER root
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
         cron \
     && rm -rf /var/lib/apt/lists/*
 
+RUN groupadd -g 999 bitwarden && \
+    useradd -r -u 999 -g bitwarden bitwarden
+
 COPY crontab /etc/cron.d/bitwarden-cron
 RUN chmod 0644 /etc/cron.d/bitwarden-cron \
     && touch /var/log/cron.log
 
+USER bitwarden
 COPY backup-db.sql /
 COPY backup-db.sh /
-RUN chmod +x /backup-db.sh
-
 COPY entrypoint.sh /
+
+USER root
+RUN chmod +x /backup-db.sh
 RUN chmod +x /entrypoint.sh
+
+USER bitwarden
 ENTRYPOINT ["/entrypoint.sh"]

util/Nginx/Dockerfile

@@ -1,9 +1,17 @@
 FROM nginx:1.12
 
+USER root
+RUN groupadd -g 999 bitwarden && \
+    useradd -r -u 999 -g bitwarden bitwarden
+
+USER bitwarden
 COPY nginx.conf /etc/nginx
 COPY proxy.conf /etc/nginx
 COPY mime.types /etc/nginx
-
 COPY entrypoint.sh /
+
+USER root
 RUN chmod +x /entrypoint.sh
+
+USER bitwarden
 ENTRYPOINT ["/entrypoint.sh"]

util/Server/Dockerfile

@@ -1,7 +1,8 @@
 FROM microsoft/aspnetcore:2.0.5
 
+USER root
 RUN groupadd -g 999 bitwarden && \
     useradd -r -u 999 -g bitwarden bitwarden
-USER bitwarden
 
+USER bitwarden
 COPY obj/Docker/publish /bitwarden_server

util/Setup/Dockerfile

@@ -1,13 +1,14 @@
 FROM microsoft/dotnet:2.0.5-runtime
 
+USER root
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
         openssl \
-&& rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/*
 
 RUN groupadd -g 999 bitwarden && \
     useradd -r -u 999 -g bitwarden bitwarden
-USER bitwarden
 
+USER bitwarden
 WORKDIR /app
 COPY obj/Docker/publish .