Update pccs dockerfile

Use non-root user according to meet code scan requirement Signed-off-by: Hao, Ruomeng <[email protected]>
cc-api · May 29, 2024 · 673b0a4 · 673b0a4
1 parent e3e10c1
commit 673b0a4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/container/pccs/Dockerfile b/container/pccs/Dockerfile
@@ -36,6 +36,8 @@ COPY container/pccs/default.json /opt/intel/sgx-dcap-pccs/config/
 COPY container/pccs/network_setting.conf /opt/intel/sgx-pck-id-retrieval-tool/
 COPY container/pccs/ssl_key /opt/intel/sgx-dcap-pccs/ssl_key
 
+RUN useradd -rm -d /home/ubuntu -s /bin/bash -g root -G sudo -u 1001 ubuntu
+USER ubuntu
 WORKDIR /opt/intel/sgx-dcap-pccs/
 
 EXPOSE 8081