mirror of
https://github.com/ipfs/kubo.git
synced 2025-07-02 12:20:03 +08:00
Merge pull request #4331 from ipfs/fix/gecos
Dockerfiles: do not set gecos field on user add. Set group.
This commit is contained in:
@ -35,7 +35,7 @@ RUN set -x \
|
|||||||
&& chmod +x tini
|
&& chmod +x tini
|
||||||
|
|
||||||
# Get the TLS CA certificates, they're not provided by busybox.
|
# Get the TLS CA certificates, they're not provided by busybox.
|
||||||
RUN apt-get install -y ca-certificates
|
RUN apt-get update && apt-get install -y ca-certificates
|
||||||
|
|
||||||
# Now comes the actual target image, which aims to be as small as possible.
|
# Now comes the actual target image, which aims to be as small as possible.
|
||||||
FROM busybox:1-glibc
|
FROM busybox:1-glibc
|
||||||
@ -62,8 +62,8 @@ EXPOSE 8081
|
|||||||
# Create the fs-repo directory and switch to a non-privileged user.
|
# Create the fs-repo directory and switch to a non-privileged user.
|
||||||
ENV IPFS_PATH /data/ipfs
|
ENV IPFS_PATH /data/ipfs
|
||||||
RUN mkdir -p $IPFS_PATH \
|
RUN mkdir -p $IPFS_PATH \
|
||||||
&& adduser -D -h $IPFS_PATH -u 1000 -g 100 ipfs \
|
&& adduser -D -h $IPFS_PATH -u 1000 -G users ipfs \
|
||||||
&& chown 1000:100 $IPFS_PATH
|
&& chown ipfs:users $IPFS_PATH
|
||||||
|
|
||||||
# Expose the fs-repo as a volume.
|
# Expose the fs-repo as a volume.
|
||||||
# start_ipfs initializes an fs-repo if none is mounted.
|
# start_ipfs initializes an fs-repo if none is mounted.
|
||||||
|
@ -58,8 +58,8 @@ EXPOSE 8081
|
|||||||
# Create the fs-repo directory and switch to a non-privileged user.
|
# Create the fs-repo directory and switch to a non-privileged user.
|
||||||
ENV IPFS_PATH /data/ipfs
|
ENV IPFS_PATH /data/ipfs
|
||||||
RUN mkdir -p $IPFS_PATH \
|
RUN mkdir -p $IPFS_PATH \
|
||||||
&& useradd -s /usr/sbin/nologin -d $IPFS_PATH -u 1000 -g 100 ipfs \
|
&& useradd -s /usr/sbin/nologin -d $IPFS_PATH -u 1000 -G users ipfs \
|
||||||
&& chown 1000:100 $IPFS_PATH
|
&& chown ipfs:users $IPFS_PATH
|
||||||
|
|
||||||
# Expose the fs-repo as a volume.
|
# Expose the fs-repo as a volume.
|
||||||
# start_ipfs initializes an fs-repo if none is mounted.
|
# start_ipfs initializes an fs-repo if none is mounted.
|
||||||
|
Reference in New Issue
Block a user