Not running as root

Author: patrickdung

Dockerfile

@@ -61,11 +61,26 @@ RUN set -eux && \
     dnf --nodocs --setopt=install_weak_deps=0 --setopt=keepcache=0 \
       -y upgrade && \
     dnf clean all && \
-    rm -rf /var/cache/yum
+    rm -rf /var/cache/yum && \
+    groupadd \
+      --gid 20000 \
+      mcrouter && \
+    useradd --no-log-init \
+      --create-home \
+      --home-dir /home/mcrouter \
+      --shell /bin/bash \
+      --uid 20000 \
+      --gid 20000 \
+      --key MAIL_DIR=/dev/null \
+      mcrouter && \
+    chown -R mcrouter:mcrouter /home/mcrouter
 
 RUN     --mount=type=bind,target=/tmp/scripts,source=scripts /tmp/scripts/runtime_deps.sh $MCROUTER_DIR
 
 ENV     LD_LIBRARY_PATH         "$INSTALL_DIR/lib64:$INSTALL_DIR/lib:$LD_LIBRARY_PATH"
 
 ## Already added in the setup script
 ##ENV LD_PRELOAD=/usr/lib64/libjemalloc.so.2
+
+USER    mcrouter
+WORKDIR /home/mcrouter

Dockerfile.arm64

@@ -62,11 +62,26 @@ RUN set -eux && \
     dnf --nodocs --setopt=install_weak_deps=0 --setopt=keepcache=0 \
       -y upgrade && \
     dnf clean all && \
-    rm -rf /var/cache/yum
+    rm -rf /var/cache/yum && \
+    groupadd \
+      --gid 20000 \
+      mcrouter && \
+    useradd --no-log-init \
+      --create-home \
+      --home-dir /home/mcrouter \
+      --shell /bin/bash \
+      --uid 20000 \
+      --gid 20000 \
+      --key MAIL_DIR=/dev/null \
+      mcrouter && \
+    chown -R mcrouter:mcrouter /home/mcrouter
 
 RUN     --mount=type=bind,target=/tmp/scripts,source=scripts /tmp/scripts/runtime_deps.sh $MCROUTER_DIR
 
 ENV     LD_LIBRARY_PATH         "$INSTALL_DIR/lib64:$INSTALL_DIR/lib:$LD_LIBRARY_PATH"
 
 ## Already added in the setup script
 ##ENV LD_PRELOAD=/usr/lib64/libjemalloc.so.2
+
+USER    mcrouter
+WORKDIR /home/mcrouter

scripts/runtime_deps.sh

@@ -24,16 +24,19 @@ set -ex
 mkdir -p /var/mcrouter/stats
 mkdir -p /var/mcrouter/fifos
 mkdir -p /var/mcrouter/config
-chgrp -R 0 /var/mcrouter
-chmod -R g=u /var/mcrouter
+#chgrp -R 0 /var/mcrouter
+#chmod -R g=u /var/mcrouter
+chown -R 20000:20000 /var/mcrouter
 
 ## Create spooldir
 mkdir -p /var/spool/mcrouter
-chgrp -R 0 /var/spool/mcrouter
-chmod -R g=u /var/spool/mcrouter
+#chgrp -R 0 /var/mcrouter
+#chmod -R g=u /var/spool/mcrouter
+chown -R 20000:20000 /var/spool/mcrouter
 
 ## Make runnable from any context
 ln -s "$INSTALL_DIR/bin/mcrouter" /usr/bin/mcrouter
 echo "export LD_LIBRARY_PATH=\"$INSTALL_DIR/lib64:$INSTALL_DIR/lib:$LD_LIBRARY_PATH\"" >> /etc/profile.d/mcrouter_libs.sh
 chmod +x /etc/profile.d/mcrouter_libs.sh
 echo "export LD_PRELOAD=/usr/lib64/libjemalloc.so.2" >> ~/.bashrc
+echo "export LD_PRELOAD=/usr/lib64/libjemalloc.so.2" >> /home/mcrouter/.bashrc