fix: add missing USER hermes at end of Dockerfile #55
@@ -75,3 +75,8 @@ USER root
|
||||
RUN chown -R hermes:hermes /opt/hermes/tools /opt/hermes/toolsets.py
|
||||
|
||||
VOLUME [ "/opt/data" ]
|
||||
|
||||
# Switch to the hermes user so the container runs unprivileged.
|
||||
# All child processes inherit this user — no more orphan root processes
|
||||
# that escape gosu privilege drops in the entrypoint.
|
||||
USER hermes
|
||||
|
||||
Reference in New Issue
Block a user