feat(docker): enhance entrypoint script with gosu for privilege handling and improve healthcheck command

2025-12-27 12:48:19 +01:00
parent bedf90d316
commit f7bad32d68
3 changed files with 38 additions and 4 deletions
@@ -36,7 +36,10 @@ FROM node:22-slim AS runner

 WORKDIR /app

-# node:22-slim already has user 'node' with UID 1000 - we'll use that
+# Install gosu for reliable privilege dropping
+RUN apt-get update && apt-get install -y --no-install-recommends gosu \
+    && rm -rf /var/lib/apt/lists/* \
+    && gosu nobody true

 # Copy built application
 COPY --from=builder /app/node_modules ./node_modules