deblan-mirror/nextcloud-spreed-signaling
deblan-mirror/nextcloud-spreed-signaling
1
0
Fork 0
mirror of https://github.com/strukturag/nextcloud-spreed-signaling synced 2026-03-14 14:35:44 +01:00
Code Issues Releases Wiki Activity

dockerfile: create system user (uid <= 999) instead of normal user (uid >= 1000), avoid home directory

Browse source 
currently the signaling server is run as uid=1000, which may be the occupied by
the first non-root normal user on most unix setups, despite not causing permission
or privilege issues, (uid is just an icon in docker, privileges are determined by linux
CAPs) a user whose uid=1000 could terminate the process of signaling server running in docker

this patch ensures that user `spreedbackend` in the container has a uid <= 999 by specifying
`adduser -S` to address the issue mentioned above

this patch also prevent creating of home directory, which is not necessary,
for user `spreedbackend` with `adduser -H`

Signed-off-by: Leo <i@hardrain980.com>
This commit is contained in:
Leo 2025-08-21 19:08:20 +08:00
commit bb996a7571
No known key found for this signature in database
GPG key ID: 4FC82CA122EBE11F
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docker/proxy/Dockerfile
View file

@ -12,7 +12,7 @@ RUN touch /.dockerenv && \
FROM alpine:3
ENV CONFIG=/config/proxy.conf
RUN adduser -D spreedbackend && \
RUN adduser -D -S -H spreedbackend && \
apk add --no-cache bash tzdata ca-certificates su-exec
COPY --from=builder /workdir/bin/proxy /usr/bin/nextcloud-spreed-signaling-proxy

2
docker/server/Dockerfile
View file

@ -12,7 +12,7 @@ RUN touch /.dockerenv && \
FROM alpine:3
ENV CONFIG=/config/server.conf
RUN adduser -D spreedbackend && \
RUN adduser -D -S -H spreedbackend && \
apk add --no-cache bash tzdata ca-certificates su-exec
COPY --from=builder /workdir/bin/signaling /usr/bin/nextcloud-spreed-signaling