Run the jaeger-agent as a non-root user by default (#2466)

Signed-off-by: chgl <[email protected]>
jaegertracing · Sep 14, 2020 · 0a889e8 · 0a889e8
1 parent df2582d
commit 0a889e8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cmd/agent/Dockerfile b/cmd/agent/Dockerfile
@@ -3,8 +3,11 @@ RUN apk add --update --no-cache ca-certificates
 
 FROM scratch
 ARG TARGETARCH=amd64
+ARG USER_UID=10001
 COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 
 EXPOSE 5775/udp 6831/udp 6832/udp 5778
 COPY agent-linux-$TARGETARCH /go/bin/agent-linux
 ENTRYPOINT ["/go/bin/agent-linux"]
+
+USER ${USER_UID}