fix: Manually create `testssl` user and home
BusyBox `adduser` was reading config from `/etc` that unnecessarily populates the home folder with various dot files. Alternative approach is to create the user and home folder manually. This avoids some extra files like the `-` suffixed backup copies from `adduser`.
This commit is contained in:
parent
1392987f01
commit
48c180d0d8
20
Dockerfile
20
Dockerfile
|
@ -70,17 +70,17 @@ EOF
|
|||
FROM scratch
|
||||
ARG INSTALL_ROOT
|
||||
COPY --link --from=builder ${INSTALL_ROOT} /
|
||||
RUN <<EOF
|
||||
# Create user:
|
||||
echo 'testssl:x:1000:1000::/home/testssl:/bin/bash' >> /etc/passwd
|
||||
echo 'testssl:x:1000:' >> /etc/group
|
||||
echo 'testssl:!::0:::::' >> /etc/shadow
|
||||
|
||||
# zypper package `busybox-adduser` fails to install with `--installroot`,
|
||||
# while the `shadow` package is too heavy just to add a user.
|
||||
#
|
||||
# Temporarily bind mount the `/bin` dir from another image that already
|
||||
# has the `adduser` command, and it'll update `/etc/{group,passwd,shadow}` for us:
|
||||
# Absolute path provided as some base images PATH would use those binaries instead,
|
||||
# `adduser` varies in supported args, so this should avoid any surprises:
|
||||
RUN --mount=type=bind,from=busybox:latest,source=/bin,target=/bin <<EOF
|
||||
/bin/adduser -D -s /bin/bash testssl
|
||||
/bin/ln -s /home/testssl/testssl.sh /usr/local/bin/
|
||||
# Create user home with SGID set:
|
||||
install --mode 2755 --owner testssl --group testssl --directory /home/testssl
|
||||
|
||||
# Add relative symlink to point to content that will COPY later:
|
||||
ln -sr /home/testssl/testssl.sh /usr/local/bin/
|
||||
EOF
|
||||
|
||||
USER testssl
|
||||
|
|
Loading…
Reference in New Issue