From d00c679f004590210eb87dfad7208813b131dfb4 Mon Sep 17 00:00:00 2001 From: Karl Haworth Date: Tue, 2 Jul 2024 12:03:30 -0400 Subject: [PATCH] change to `ADD` from `COPY` and adjust Signed-off-by: Karl Haworth --- contrib/docker/minimal-hardened-image/Dockerfile | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/contrib/docker/minimal-hardened-image/Dockerfile b/contrib/docker/minimal-hardened-image/Dockerfile index 987952387e..53eec1b55f 100644 --- a/contrib/docker/minimal-hardened-image/Dockerfile +++ b/contrib/docker/minimal-hardened-image/Dockerfile @@ -66,14 +66,13 @@ RUN --mount=type=cache,target=/var/cache/apk,sharing=locked,uid=65532,gid=65532 tini WORKDIR /app + +COPY package.json app-config.yaml ./ +ADD packages/backend/dist/skeleton.tar.gz packages/backend/dist/bundle.tar.gz ./ + RUN chown -R 65532:65532 /app -USER nonroot - -COPY --chown=65532:65532 package.json packages/backend/dist/skeleton.tar.gz ./ -RUN tar xzf skeleton.tar.gz && rm skeleton.tar.gz - -COPY --chown=65532:65532 packages/backend/dist/bundle.tar.gz app-config*.yaml ./ -RUN tar xzf bundle.tar.gz && rm bundle.tar.gz +RUN chown -R 65532:65532 /tmp +USER 65532:65532 COPY --from=node-builder --chown=65532:65532 /app/node_modules ./node_modules COPY --from=python-builder --chown=65532:65532 /home/nonroot/venv /home/nonroot/venv