drop privileges in containerfile

Signed-off-by: Joel Savitz <[email protected]>
underground-software · Jan 21, 2025 · 02dd96d · 02dd96d
1 parent 4701114
commit 02dd96d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/orbit/radius.py b/orbit/radius.py
@@ -764,6 +764,12 @@ def handle_containerfile(rocket):
 smtpserverport = 465
 smtpencryption = ssl
 GITCONFIG
+
+RUN useradd {username} -U
+VOLUME /home/{username}/
+USER {username}:{username}
+WORKDIR /home/{username}/
+ENTRYPOINT ["/usr/bin/bash", "-l", "-i"]
     '''.encode())