Add nonroot user to quarto+shinylive

Signed-off-by: Peter Solymos <psolymos@gmail.com>

quarto-py-shinylive/Dockerfile.of → quarto-py-shinylive/Dockerfile

@@ -1,9 +1,14 @@
 FROM ghcr.io/openfaas/of-watchdog:0.10.1 AS watchdog
 
 FROM alpine:3.20
-COPY app /app
+
+RUN adduser -D app
+USER app
+WORKDIR /home/app
+COPY app .
+
 COPY --from=watchdog /fwatchdog .
 ENV mode="static"
-ENV static_path="/app"
+ENV static_path="/home/app"
 HEALTHCHECK --interval=3s CMD [ -e /tmp/.lock ] || exit 1
 CMD ["./fwatchdog"]

quarto-py-shinylive/Dockerfile.multi

@@ -16,13 +16,15 @@ RUN pip install --no-cache-dir --upgrade -r requirements.txt
 RUN quarto add quarto-ext/shinylive --no-prompt
 RUN quarto render /root/app/index.qmd --output-dir /root/output
 
-
 FROM ghcr.io/openfaas/of-watchdog:0.10.1 AS watchdog
 
 FROM alpine:3.20
-COPY --from=builder /root/output /app
+RUN adduser -D app
+USER app
+WORKDIR /home/app
+COPY --from=builder /root/output /home/app
 COPY --from=watchdog /fwatchdog .
 ENV mode="static"
-ENV static_path="/app"
+ENV static_path="/home/app"
 HEALTHCHECK --interval=3s CMD [ -e /tmp/.lock ] || exit 1
 CMD ["./fwatchdog"]

quarto-py-shinylive/README.md

@@ -23,7 +23,7 @@ export DOCKER_DEFAULT_PLATFORM=linux/amd64
 export NAME=faithful/quarto-py-shinylive
 
 # Build image
-docker build -t ${NAME}:of -f Dockerfile.of .
+docker build -t ${NAME}:of -f Dockerfile .
 
 # Run image, visit http://localhost:8080
 docker run --rm -p 8080:8080 ${NAME}:of

quarto-r-shinylive/Dockerfile.of → quarto-r-shinylive/Dockerfile

@@ -1,9 +1,14 @@
 FROM ghcr.io/openfaas/of-watchdog:0.10.1 AS watchdog
 
 FROM alpine:3.20
-COPY app /app
+
+RUN adduser -D app
+USER app
+WORKDIR /home/app
+COPY app .
+
 COPY --from=watchdog /fwatchdog .
 ENV mode="static"
-ENV static_path="/app"
+ENV static_path="/home/app"
 HEALTHCHECK --interval=3s CMD [ -e /tmp/.lock ] || exit 1
 CMD ["./fwatchdog"]

quarto-r-shinylive/Dockerfile.multi

@@ -13,13 +13,15 @@ COPY quarto-r-shinylive/index.qmd /root/app/index.qmd
 RUN quarto add quarto-ext/shinylive --no-prompt
 RUN quarto render /root/app/index.qmd --output-dir /root/output
 
-
 FROM ghcr.io/openfaas/of-watchdog:0.10.1 AS watchdog
 
 FROM alpine:3.20
-COPY --from=builder /root/output /app
+RUN adduser -D app
+USER app
+WORKDIR /home/app
+COPY --from=builder /root/output /home/app
 COPY --from=watchdog /fwatchdog .
 ENV mode="static"
-ENV static_path="/app"
+ENV static_path="/home/app"
 HEALTHCHECK --interval=3s CMD [ -e /tmp/.lock ] || exit 1
 CMD ["./fwatchdog"]

quarto-r-shinylive/README.md

@@ -22,7 +22,7 @@ export DOCKER_DEFAULT_PLATFORM=linux/amd64
 export NAME=faithful/quarto-r-shinylive
 
 # Build image
-docker build -t ${NAME}:of -f Dockerfile.of .
+docker build -t ${NAME}:of -f Dockerfile .
 
 # Run image, visit http://localhost:8080
 docker run --rm -p 8080:8080 ${NAME}:of