PR #7641 build(docker): specify user for runner stage

pixincreate17 days ago (edited 16 days ago)

Type of Change

Description

This PR modifies the Dockerfile to specify the user at runner stage.

Additional Changes

This PR modifies the API contract
This PR modifies the database schema
This PR modifies application configuration/environment variables

Motivation and Context

From the security perspective, it is better to be a user rather than being a root.
Closes #7643

How did you test it?

build succeeded (tested by making a debug build):

podman build \
    --load \
    --file Dockerfile \
    --build-arg "BINARY=router" \
    --tag hyperswitch-router \
    .

Checklist

I formatted the code cargo +nightly fmt --all
I addressed lints thrown by cargo clippy
I reviewed the submitted code
I added unit tests for my changes where possible

build(docker): specify user for runner stage

e37e371b

pixincreate added A-infra

pixincreate added S-waiting-on-review

pixincreate added this to the March 2025 Release milestone 17 days ago

pixincreate requested a review from

SanchithHegde 17 days ago

pixincreate assigned

pixincreate 17 days ago

semanticdiff-com17 days ago

Review changes with

pixincreate marked this pull request as ready for review 16 days ago

pixincreate requested a review 16 days ago

pixincreate requested a review from

Chethan-rao 16 days ago

pixincreate force pushed from 4c46d598 to 33a9fa9e 16 days ago

fix: change user after moving binary

c8afc721

pixincreate force pushed from 33a9fa9e to c8afc721 16 days ago

pixincreate force pushed from 5b01c871 to 5e68f3c7 16 days ago

pixincreate force pushed from 5e68f3c7 to 3b079979 16 days ago

refactor: do not create system group

1ceb3598

pixincreate force pushed from 3b079979 to 1ceb3598 16 days ago

chore(docker): remove extra blank line

f7a7cd1a

SanchithHegde approved these changes on 2025-03-26

ShankarSinghC approved these changes on 2025-03-27

SanchithHegde removed S-waiting-on-review

SanchithHegde merged ce3f2493 into main 16 days ago

SanchithHegde deleted the dockerfile-add-user branch 16 days ago

hyperswitch
build(docker): specify user for runner stage
#7641

Merged

build(docker): specify user for runner stage #7641

Type of Change

Description

Additional Changes

Motivation and Context

How did you test it?

Checklist

hyperswitch build(docker): specify user for runner stage #7641 Merged

build(docker): specify user for runner stage #7641

Type of Change

Description

Additional Changes

Motivation and Context

How did you test it?

Checklist

hyperswitch
build(docker): specify user for runner stage
#7641

Merged