Change base images and run as non-root (#93)

Addresses #71 Co-authored-by: Mariano Uvalle <[email protected]>
Azure · Mar 27, 2024 · 4428ef4 · 4428ef4
1 parent f4adcd9
commit 4428ef4
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/docker/eno-controller/Dockerfile b/docker/eno-controller/Dockerfile
@@ -8,6 +8,10 @@ RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 go build -ldflags="-s -w" ./cmd/eno-controller
 
-FROM scratch
+FROM gcr.io/distroless/static
+
+# https://github.com/GoogleContainerTools/distroless/blob/16dc4a6a33838006fe956e4c19f049ece9c18a8d/common/variables.bzl#L18
+USER 65532:65532
+
 COPY --from=builder /app/eno-controller /eno-controller
 ENTRYPOINT ["/eno-controller"]
diff --git a/docker/eno-reconciler/Dockerfile b/docker/eno-reconciler/Dockerfile
@@ -8,6 +8,10 @@ RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 go build -ldflags="-s -w" ./cmd/eno-reconciler
 
-FROM scratch
+FROM gcr.io/distroless/static
+
+# https://github.com/GoogleContainerTools/distroless/blob/16dc4a6a33838006fe956e4c19f049ece9c18a8d/common/variables.bzl#L18
+USER 65532:65532
+
 COPY --from=builder /app/eno-reconciler /eno-reconciler
 ENTRYPOINT ["/eno-reconciler"]