Adds influxdb user to alpine Dockerfiles

Allow containers to be run as non root by adding an influxdb user and group. Home directory of the user is set to the data dir of influx
influxdata · Apr 9, 2020 · 0c101ba · 0c101ba
1 parent 29ba808
commit 0c101ba
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 4 deletions.
diff --git a/influxdb/1.5/alpine/Dockerfile b/influxdb/1.5/alpine/Dockerfile
@@ -23,7 +23,9 @@ RUN set -ex && \
     chmod +x /usr/src/influxdb-*/* && \
     cp -a /usr/src/influxdb-*/* /usr/bin/ && \
     rm -rf *.tar.gz* /usr/src /root/.gnupg && \
-    apk del .build-deps
+    apk del .build-deps && \
+    addgroup -g 1000 influxdb && \
+    adduser -G influxdb -u 1000 -S -h /var/lib/influxdb influxdb
 COPY influxdb.conf /etc/influxdb/influxdb.conf
 
 EXPOSE 8086

diff --git a/influxdb/1.6/alpine/Dockerfile b/influxdb/1.6/alpine/Dockerfile
@@ -23,7 +23,9 @@ RUN set -ex && \
     chmod +x /usr/src/influxdb-*/* && \
     cp -a /usr/src/influxdb-*/* /usr/bin/ && \
     rm -rf *.tar.gz* /usr/src /root/.gnupg && \
-    apk del .build-deps
+    apk del .build-deps && \
+    addgroup -g 1000 influxdb && \
+    adduser -G influxdb -u 1000 -S -h /var/lib/influxdb influxdb
 COPY influxdb.conf /etc/influxdb/influxdb.conf
 
 EXPOSE 8086

diff --git a/influxdb/1.7/alpine/Dockerfile b/influxdb/1.7/alpine/Dockerfile
@@ -23,7 +23,9 @@ RUN set -ex && \
     chmod +x /usr/src/influxdb-*/* && \
     cp -a /usr/src/influxdb-*/* /usr/bin/ && \
     rm -rf *.tar.gz* /usr/src /root/.gnupg && \
-    apk del .build-deps
+    apk del .build-deps && \
+    addgroup -g 1000 influxdb && \
+    adduser -G influxdb -u 1000 -S -h /var/lib/influxdb influxdb
 COPY influxdb.conf /etc/influxdb/influxdb.conf
 
 EXPOSE 8086

diff --git a/influxdb/nightly/alpine/Dockerfile b/influxdb/nightly/alpine/Dockerfile
@@ -21,7 +21,9 @@ RUN set -ex && \
     chmod +x /usr/src/influxdb-*/* && \
     cp -a /usr/src/influxdb-*/* /usr/bin/ && \
     rm -rf *.tar.gz* /usr/src /root/.gnupg && \
-    apk del .build-deps
+    apk del .build-deps && \
+    addgroup -g 1000 influxdb && \
+    adduser -G influxdb -u 1000 -S -h /var/lib/influxdb influxdb
 COPY influxdb.conf /etc/influxdb/influxdb.conf
 
 EXPOSE 8083 8086