Revert "Drop root privileges"
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
This reverts commit 30fec481d4
.
This commit is contained in:
parent
30fec481d4
commit
5182d9e300
1 changed files with 8 additions and 11 deletions
19
Dockerfile
19
Dockerfile
|
@ -5,30 +5,27 @@ COPY --from=koalaman/shellcheck:v0.9.0 /bin/shellcheck /bin/
|
||||||
ENV BUILD_BASE_VERSION="0.5-r3"
|
ENV BUILD_BASE_VERSION="0.5-r3"
|
||||||
# renovate: datasource=repology depName=alpine_3_18/gcc versioning=loose
|
# renovate: datasource=repology depName=alpine_3_18/gcc versioning=loose
|
||||||
ENV GCC_VERSION="12.2.1_git20220924-r10"
|
ENV GCC_VERSION="12.2.1_git20220924-r10"
|
||||||
|
# renovate: datasource=repology depName=alpine_3_18/ruby versioning=loose
|
||||||
|
ENV RUBY_VERSION="3.2.2-r0"
|
||||||
# renovate: datasource=repology depName=alpine_3_18/git versioning=loose
|
# renovate: datasource=repology depName=alpine_3_18/git versioning=loose
|
||||||
ENV GIT_VERSION="2.40.1-r0"
|
ENV GIT_VERSION="2.40.1-r0"
|
||||||
# renovate: datasource=repology depName=alpine_3_18/ruby versioning=loose
|
# renovate: datasource=repology depName=alpine_3_18/openssh-keygen versioning=loose
|
||||||
ENV OPENSSH_KEYGEN_VERSION="9.3_p2-r0"
|
ENV OPENSSH_KEYGEN_VERSION="9.3_p2-r0"
|
||||||
# renovate: datasource=pypi depName=pre-commit versioning=pep440
|
# renovate: datasource=pypi depName=pre-commit versioning=pep440
|
||||||
ENV RUBY_VERSION="3.2.2-r0"
|
ENV PRE_COMMIT_VERSION="3.4.0"
|
||||||
# renovate: datasource=repology depName=alpine_3_18/openssh-keygen versioning=loose
|
|
||||||
ENV PRE_COMMIT_VERSION="3.3.3"
|
|
||||||
# renovate: datasource=rubygems depName=mdl versioning=ruby
|
# renovate: datasource=rubygems depName=mdl versioning=ruby
|
||||||
ENV MDL_VERSION="0.11.0"
|
ENV MDL_VERSION="0.12.0"
|
||||||
|
|
||||||
RUN apk add --update --no-cache \
|
RUN apk add --update --no-cache \
|
||||||
build-base="${BUILD_BASE_VERSION}" \
|
build-base="${BUILD_BASE_VERSION}" \
|
||||||
gcc="${GCC_VERSION}" \
|
gcc="${GCC_VERSION}" \
|
||||||
|
ruby="${RUBY_VERSION}" \
|
||||||
git="${GIT_VERSION}" \
|
git="${GIT_VERSION}" \
|
||||||
openssh-keygen="${OPENSSH_KEYGEN_VERSION}" \
|
openssh-keygen="${OPENSSH_KEYGEN_VERSION}" \
|
||||||
ruby="${RUBY_VERSION}" \
|
|
||||||
&& \
|
&& \
|
||||||
|
pip install --no-cache-dir pre-commit=="${PRE_COMMIT_VERSION}" && \
|
||||||
gem install --no-document mdl -v "${MDL_VERSION}" && \
|
gem install --no-document mdl -v "${MDL_VERSION}" && \
|
||||||
mkdir /data && \
|
mkdir /data && \
|
||||||
adduser -D -h /home/user/ -g user user
|
git config --global --add safe.directory /data
|
||||||
|
|
||||||
USER user:user
|
|
||||||
ENV PATH="/home/user/.local/bin:${PATH}"
|
|
||||||
RUN pip install --no-cache-dir pre-commit=="${PRE_COMMIT_VERSION}"
|
|
||||||
|
|
||||||
WORKDIR /data
|
WORKDIR /data
|
||||||
|
|
Loading…
Reference in a new issue