From c8aba8937487d8ceeb6ecae3aae3c8c2bebfdd34 Mon Sep 17 00:00:00 2001 From: sid palas Date: Fri, 10 Feb 2023 11:01:26 -0500 Subject: [PATCH] use unprivileged nginx container --- 06-building-container-images/client-react/Dockerfile.1 | 1 + 06-building-container-images/client-react/Dockerfile.4 | 2 +- 06-building-container-images/client-react/Dockerfile.5 | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/06-building-container-images/client-react/Dockerfile.1 b/06-building-container-images/client-react/Dockerfile.1 index d720973..c402e7a 100644 --- a/06-building-container-images/client-react/Dockerfile.1 +++ b/06-building-container-images/client-react/Dockerfile.1 @@ -1,3 +1,4 @@ +# Pin specific version FROM node:19.4-bullseye COPY . . diff --git a/06-building-container-images/client-react/Dockerfile.4 b/06-building-container-images/client-react/Dockerfile.4 index 9d50c14..09364d8 100644 --- a/06-building-container-images/client-react/Dockerfile.4 +++ b/06-building-container-images/client-react/Dockerfile.4 @@ -17,7 +17,7 @@ COPY . . RUN npm run build # Use separate stage for deployable image -FROM nginx:1.23-alpine +FROM nginxinc/nginx-unprivileged:1.23-alpine-perl COPY nginx.conf /etc/nginx/conf.d/default.conf diff --git a/06-building-container-images/client-react/Dockerfile.5 b/06-building-container-images/client-react/Dockerfile.5 index 13c1902..19310d8 100644 --- a/06-building-container-images/client-react/Dockerfile.5 +++ b/06-building-container-images/client-react/Dockerfile.5 @@ -19,7 +19,7 @@ COPY . . RUN npm run build # Use separate stage for deployable image -FROM nginx:1.23-alpine +FROM nginxinc/nginx-unprivileged:1.23-alpine-perl # Use COPY --link to avoid breaking cache if we change the second stage base image COPY --link nginx.conf /etc/nginx/conf.d/default.conf