commit 611ca8acaa9c9ce1949d5991138efc5b0f5d24de parent 1bb433885315a04e2f241d02f119926cad2ca10d Author: finwo <finwo@pm.me> Date: Sat, 17 Oct 2026 19:02:06 +0200 Always run as 1000:1000, no more implied IDs Diffstat:
| M | deploy/Dockerfile | | | 6 | ++++-- |
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/deploy/Dockerfile b/deploy/Dockerfile @@ -53,8 +53,10 @@ FROM alpine:${ALPINE_VERSION} # built in, so there is no database client to install. RUN apk add --no-cache ca-certificates git nodejs -# Alpine has no unprivileged user to borrow, unlike the node image. -RUN addgroup -S conductor && adduser -S -G conductor -h /app conductor +# Fixed uid/gid so a mounted volume keeps working across rebuilds and +# hosts, where an automatic id would drift. +RUN addgroup -S -g 1000 conductor \ + && adduser -S -u 1000 -G conductor -h /app conductor WORKDIR /app