Allow running as user different than root

.env.sample

@@ -3,3 +3,8 @@ REVERSER_DATA_PATH=
 # EXPOSED_SERVER_PORT=
 # EXPOSED_POSTGRES_PORT=
 # EXPOSED_VNC_PORT=
+# Start the container as a different user than root.
+# Use `id -u` to print the UID and `id -g` for the GID of your host user.
+# HOST_UID=
+# HOST_GID=
+# DOCKER_USER=reverser

Dockerfile

@@ -19,10 +19,19 @@ WORKDIR /app
 RUN apk --no-cache add \
   tzdata git \
   postgresql16-client \
-  vips ffmpeg
+  vips ffmpeg \
+  sudo
 
 RUN git config --global --add safe.directory /app
 
+# Create a user with (potentially) the same id as on the host
+ARG HOST_UID=1000
+ARG HOST_GID=1000
+RUN addgroup --gid ${HOST_GID} reverser && \
+  adduser -S --shell /bin/sh --uid ${HOST_UID} reverser && \
+  addgroup reverser wheel && \
+  echo "reverser ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+
 # Copy native npm package binaries
 COPY --from=node-downloader /usr/local/lib/node_modules/esbuild/bin/esbuild /usr/local/bin
 

docker-compose.yml

@@ -9,6 +9,7 @@ services:
   reverser:
     build: ./
     image: reverser
+    user: ${DOCKER_USER:-root}
     environment:
       <<: *common-env
       RAILS_SERVER_EXEC: bin/rails server -p ${EXPOSED_SERVER_PORT:-9000} -b 0.0.0.0 --pid /tmp/server.pid