diff --git a/Dockerfile b/Dockerfile index 6d53e60..422dd8c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -27,11 +27,14 @@ WORKDIR /app/policy-manager RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o server # ---- Runtime Stage ---- -FROM gcr.io/distroless/base-debian12 +FROM debian:bookworm-slim WORKDIR /app COPY --from=builder /app/policy-manager/server . +RUN groupadd -r nonroot && useradd -r -g nonroot nonroot && chown -R nonroot:nonroot /app + + EXPOSE 8080 USER nonroot:nonroot ENTRYPOINT ["/app/server"] \ No newline at end of file