DEV Community

Discussion on: Dockerfile Templates For All Programming languages

Collapse
 
habereder profile image
Raphael Habereder • Edited

I glanced over a few of them, and If there was one thing I'd recommend, it's always using

USER nobody

In case someone doesn't have User Namespace Remapping active, it would also run as nobody and your System won't be compromised as easily.

If you want I can take a longer look later and recommend some Basic hardening in an issue, or create some pull requests for you.

Other than that, thanks for doing this :)

Collapse
 
gauthamp10 profile image
Gautham Prakash • Edited

I was patching up the same . Will do ASAP.
Now I'm adding a user to group to do things other than package downloading.
It would be helpful if you could guide me when you have the time @habereder
Thanks by the way.

Collapse
 
habereder profile image
Raphael Habereder

Gladly!
I just forked it and will implement some basic things in different branches for you to cherry-pick then :)

Thread Thread
 
gauthamp10 profile image
Gautham Prakash

Cool.