1
0
mirror of https://github.com/bitwarden/server.git synced 2025-07-01 16:12:49 -05:00

docker as non-root

This commit is contained in:
Kyle Spearrin
2018-03-26 11:21:03 -04:00
parent d945431ac1
commit b8ed8853cd
12 changed files with 104 additions and 37 deletions

View File

@ -5,14 +5,27 @@ RUN apt-get update \
cron \
&& rm -rf /var/lib/apt/lists/*
RUN groupadd -g 999 bitwarden \
&& useradd -r -u 999 -g bitwarden bitwarden
COPY crontab /etc/cron.d/bitwarden-cron
RUN chmod 0644 /etc/cron.d/bitwarden-cron \
&& touch /var/log/cron.log
&& touch /var/log/cron.log \
&& chown bitwarden:bitwarden /var/log/cron.log
COPY backup-db.sql /
COPY backup-db.sh /
RUN chmod +x /backup-db.sh
COPY entrypoint.sh /
RUN chmod +x /entrypoint.sh
RUN mkdir /etc/bitwarden \
&& chown -R bitwarden:bitwarden /etc/bitwarden \
&& mkdir /var/opt/mssql \
&& chown -R bitwarden:bitwarden /var/opt/mssql \
&& chmod +x /entrypoint.sh \
&& chmod +x /backup-db.sh \
&& chown bitwarden:bitwarden /entrypoint.sh \
&& chown bitwarden:bitwarden /backup-db.sh \
&& chown bitwarden:bitwarden /backup-db.sql
USER bitwarden
ENTRYPOINT ["/entrypoint.sh"]

View File

@ -1,3 +1,3 @@
0 0 * * * root /backup-db.sh >> /var/log/cron.log 2>&1
0 0 * * * bitwarden /backup-db.sh >> /var/log/cron.log 2>&1
# An empty line is required at the end of this file for a valid cron file.