use a non-root user for npm install in docker

timvisee · Jun 23, 2017 · 2691dfc · 2691dfc
1 parent 9d1e207
commit 2691dfc
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,9 @@
-FROM node:8.1-alpine
+FROM node:8-alpine
 
+RUN adduser -S app
 COPY . /app
+RUN chown -R app /app
+USER app
 WORKDIR /app
 RUN mkdir static
 RUN npm install