This commit is contained in:
+5
-2
@@ -19,13 +19,16 @@ COPY app.py .
|
||||
FROM base AS test
|
||||
COPY docker-compose.yml docker-compose.local.yml ./
|
||||
COPY tests ./tests
|
||||
RUN python -m unittest discover -s tests -v
|
||||
RUN python -m unittest discover -s tests -v \
|
||||
&& touch /tmp/tests-passed
|
||||
|
||||
# 実行用ステージ
|
||||
FROM base AS runtime
|
||||
|
||||
# 非rootユーザーを作成
|
||||
RUN useradd --create-home --shell /bin/bash appuser \
|
||||
COPY --from=test /tmp/tests-passed /tmp/tests-passed
|
||||
RUN rm /tmp/tests-passed \
|
||||
&& useradd --create-home --shell /bin/bash appuser \
|
||||
&& chown -R appuser:appuser /app
|
||||
USER appuser
|
||||
|
||||
|
||||
Reference in New Issue
Block a user