build: avoid root user in celery worker and beat

l3vels · Nov 1, 2023 · 0141b09 · 0141b09
1 parent ce4ad7f
commit 0141b09
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 22 deletions.
diff --git a/apps/worker/docker/Dockerfile.beat b/apps/worker/docker/Dockerfile.beat
@@ -15,6 +15,9 @@ RUN pip install poetry \
     && poetry config virtualenvs.create false \
     && poetry install --no-interaction --no-ansi
 
+RUN adduser --disabled-password --gecos '' myuser
+USER myuser
+
 # Copy project
 COPY ./ /app/
 

diff --git a/apps/worker/docker/Dockerfile.worker b/apps/worker/docker/Dockerfile.worker
@@ -16,30 +16,11 @@ RUN pip install poetry \
     && poetry install --no-interaction --no-ansi
 
 
+RUN adduser --disabled-password --gecos '' myuser
+USER myuser
+
 # Copy project
 COPY ./ /app/
 
 # Run Celery worker
 ENTRYPOINT ["celery", "-A", "main", "worker", "--loglevel=info"]
-
-
-
-
-
-# # Install Flower
-# RUN pip install flower
-
-# # Find where flower is installed and add it to the PATH
-# ENV PATH=$PATH:$(dirname $(which flower))
-
-# # Install supervisord
-# RUN apt-get update && apt-get install -y supervisor
-
-# # Copy project
-# COPY ./ /app/
-
-# # Copy supervisor configuration
-# COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
-
-# # Run supervisord
-# CMD ["/usr/bin/supervisord"]