mirror of
https://github.com/davidallendj/opaal.git
synced 2025-12-20 03:27:02 -07:00
e3740c584e
Without this, opaal, running as nobody, tries to write its sqlite db cache file to / which is owned by root. With this, an /opaal directory is created, owned by nobody, and the opaal binary is copied here. That way, it has permission to write its cache file here. Any config can be copied here as well.
16 lines
259 B
Docker
16 lines
259 B
Docker
FROM cgr.dev/chainguard/wolfi-base
|
|
|
|
RUN apk add --no-cache tini bash curl
|
|
|
|
RUN mkdir /opaal
|
|
RUN chown 65534:65534 /opaal
|
|
WORKDIR /opaal
|
|
|
|
# nobody 65534:65534
|
|
USER 65534:65534
|
|
|
|
COPY opaal /opaal/opaal
|
|
|
|
CMD [ "/opaal/opaal" ]
|
|
|
|
ENTRYPOINT [ "/sbin/tini", "--" ]
|