From 313e87c102562445288e94f8ce1355fb1a828c0d Mon Sep 17 00:00:00 2001 From: Bernhard B Date: Fri, 25 Dec 2020 17:04:52 +0100 Subject: [PATCH] add --no-log-init flag when creating a user with useradd * there seems to be a bug in the Go archiver which could lead to disk exhaustion under certain circumstances. This flag will be added to be on the safe side. see https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user for details. --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 26eefd8..6a9f5f6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -50,7 +50,7 @@ COPY --from=buildcontainer /tmp/signal-cli /opt/signal-cli COPY entrypoint.sh /entrypoint.sh RUN groupadd -g 1000 signal-api \ - && useradd -M -d /home -s /bin/bash -u 1000 -g 1000 signal-api \ + && useradd --no-log-init -M -d /home -s /bin/bash -u 1000 -g 1000 signal-api \ && ln -s /opt/signal-cli/bin/signal-cli /usr/bin/signal-cli \ && mkdir -p /signal-cli-config/ \ && mkdir -p /home/.local/share/signal-cli