From bd3da2c1704bb7b7529414006177e929576896cf Mon Sep 17 00:00:00 2001 From: Venktesh Shivam Patel Date: Thu, 26 Oct 2023 19:22:08 +0100 Subject: [PATCH] update dockerfile for debian N+ (#4575) --- build/Dockerfile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/build/Dockerfile b/build/Dockerfile index ec486fbeff..1b69654a29 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -69,6 +69,8 @@ RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode --mount=type=secret,id=nginx-repo.key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \ --mount=type=bind,from=opentracing-lib,target=/tmp/ot/ \ apt-get update \ + && groupadd --system --gid 101 nginx \ + && useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx \ && apt-get install --no-install-recommends --no-install-suggests -y ca-certificates gnupg curl apt-transport-https \ && curl -fsSL https://cs.nginx.com/static/keys/nginx_signing.key | gpg --dearmor > /etc/apt/trusted.gpg.d/nginx_signing.gpg \ && curl -fsSL -o /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/files/90pkgs-nginx \ @@ -93,6 +95,8 @@ RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode --mount=type=secret,id=nginx-repo.key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \ --mount=type=bind,from=opentracing-lib,target=/tmp/ot/ \ apt-get update \ + && groupadd --system --gid 101 nginx \ + && useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx \ ## the code below is duplicated from the debian-plus image because NAP doesn't support debian 12 && apt-get install --no-install-recommends --no-install-suggests -y ca-certificates gnupg curl apt-transport-https \ && curl -fsSL https://cs.nginx.com/static/keys/nginx_signing.key | gpg --dearmor > /etc/apt/trusted.gpg.d/nginx_signing.gpg \