Default to non-root user
This commit is contained in:
		@@ -5,10 +5,15 @@
 | 
			
		||||
 | 
			
		||||
FROM maven:3.6-jdk-8
 | 
			
		||||
 | 
			
		||||
# Or your actual UID, GID on Linux if not the default 1000
 | 
			
		||||
ARG USERNAME=vscode
 | 
			
		||||
ARG USER_UID=1000
 | 
			
		||||
ARG USER_GID=$USER_UID
 | 
			
		||||
 | 
			
		||||
# Configure apt
 | 
			
		||||
ENV DEBIAN_FRONTEND=noninteractive
 | 
			
		||||
RUN apt-get update \
 | 
			
		||||
    && apt-get -y install --no-install-recommends apt-utils 2>&1 \
 | 
			
		||||
    && apt-get -y install --no-install-recommends apt-utils dialog 2>&1 \
 | 
			
		||||
    #
 | 
			
		||||
    # Install git, process tools, lsb-release (common in install instructions for CLIs)
 | 
			
		||||
    && apt-get -y install git procps lsb-release \
 | 
			
		||||
@@ -16,9 +21,17 @@ RUN apt-get update \
 | 
			
		||||
    # Allow for a consistant java home location for settings - image is changing over time
 | 
			
		||||
    && if [ ! -d "/docker-java-home" ]; then ln -s "${JAVA_HOME}" /docker-java-home; fi \
 | 
			
		||||
    #
 | 
			
		||||
    # Create a non-root user to use if preferred - see https://aka.ms/vscode-remote/containers/non-root-user.
 | 
			
		||||
    && groupadd --gid $USER_GID $USERNAME \
 | 
			
		||||
    && useradd -s /bin/bash --uid $USER_UID --gid $USER_GID -m $USERNAME \
 | 
			
		||||
    # [Optional] Add sudo support for non-root user
 | 
			
		||||
    && apt-get install -y sudo \
 | 
			
		||||
    && echo $USERNAME ALL=\(root\) NOPASSWD:ALL > /etc/sudoers.d/$USERNAME \
 | 
			
		||||
    && chmod 0440 /etc/sudoers.d/$USERNAME \
 | 
			
		||||
    #
 | 
			
		||||
    # Clean up
 | 
			
		||||
    && apt-get autoremove -y \
 | 
			
		||||
    && apt-get clean -y \
 | 
			
		||||
    && rm -rf /var/lib/apt/lists/*
 | 
			
		||||
 | 
			
		||||
ENV DEBIAN_FRONTEND=dialog
 | 
			
		||||
ENV DEBIAN_FRONTEND=
 | 
			
		||||
 
 | 
			
		||||
@@ -8,5 +8,8 @@
 | 
			
		||||
	"settings":{
 | 
			
		||||
		"java.home": "/docker-java-home",
 | 
			
		||||
		"terminal.integrated.shell.linux": "/bin/bash"
 | 
			
		||||
	}
 | 
			
		||||
	},
 | 
			
		||||
	// Comment out the next line to run as root instead. Linux users, 
 | 
			
		||||
	// update Dockerfile with your user's UID/GID if not 1000.
 | 
			
		||||
	"runArgs": ["-u", "vscode"]
 | 
			
		||||
}
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user