fleet/Dockerfile

FROM alpine:3.17.2@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501
LABEL maintainer="Fleet Developers"

RUN apk --update add ca-certificates
RUN apk --no-cache add jq

# Create FleetDM group and user
RUN addgroup -S fleet && adduser -S fleet -G fleet

COPY ./build/binary-bundle/linux/fleet ./build/binary-bundle/linux/fleetctl /usr/bin/

USER fleet
CMD ["fleet", "serve"]
Pin image SHA in Dockerfiles (#10205) ## Summary This pull request is created by [Secure Repo](https://app.stepsecurity.io/securerepo) at the request of @zwass. Please merge the Pull Request to incorporate the requested changes. Please tag @zwass on your message if you have any questions related to the PR. You can also engage with the [StepSecurity](https://github.com/step-security) team by tagging @step-security-bot. ## Security Fixes ### Secure Dockerfiles Pin image tags to digests in Dockerfiles. With the Docker v2 API release, it became possible to use digests in place of tags when pulling images or to use them in FROM lines in Dockerfiles. - [The Open Source Security Foundation (OpenSSF) Security Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies) ## Feedback For bug reports, feature requests, and general feedback; please create an issue in [step-security/secure-repo](https://github.com/step-security/secure-repo). To create such PRs, please visit https://app.stepsecurity.io/securerepo. Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> --------- Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Co-authored-by: Zach Wasserman <zach@fleetdm.com> 2023-03-01 19:37:00 +00:00			`FROM alpine:3.17.2@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501`
Drew bakerfdm remove email mentions (#8641) * Remove email address for redudancy Call to actions at the bottom of the page offer better forms of communication to join the community, trial Fleet, or ask questions. * Remove email mention * Remove email mention * Remove email mention 2022-11-10 16:59:08 +00:00			`LABEL maintainer="Fleet Developers"`
add Dockerfile (#94) * add Dockerfile to build 2016-08-25 13:25:02 +00:00
Make it harder to accidentally release macOS binaries (#1566) 2017-10-16 23:35:14 +00:00			`RUN apk --update add ca-certificates`
add jq to docker images (#6531) 2022-07-19 16:02:51 +00:00			`RUN apk --no-cache add jq`
add system roots to alpine container. (#890) Fixes #889 2017-01-11 06:39:14 +00:00
Updated .dockerignore and added non-root user to Dockerfile (#143) Running applications as root (default Docker user) is not a good security practice. The goal of this PR is to run the Fleet application as a non-root user. For development you can still access the container as root with the following command: `docker run -it --user=0 <fleetdm container ID> bash` 2020-12-22 16:23:17 +00:00			`# Create FleetDM group and user`
			`RUN addgroup -S fleet && adduser -S fleet -G fleet`

Add fleetctl to generated Docker images (#1896) 2018-08-08 23:21:49 +00:00			`COPY ./build/binary-bundle/linux/fleet ./build/binary-bundle/linux/fleetctl /usr/bin/`
add Dockerfile (#94) * add Dockerfile to build 2016-08-25 13:25:02 +00:00
Updated .dockerignore and added non-root user to Dockerfile (#143) Running applications as root (default Docker user) is not a good security practice. The goal of this PR is to run the Fleet application as a non-root user. For development you can still access the container as root with the following command: `docker run -it --user=0 <fleetdm container ID> bash` 2020-12-22 16:23:17 +00:00			`USER fleet`
Make it harder to accidentally release macOS binaries (#1566) 2017-10-16 23:35:14 +00:00			`CMD ["fleet", "serve"]`