Dockerfile should run make check as a non-root user #6

New Issue

clawbot · 2026-07-26T18:19:38+02:00

clawbot commented

2026-07-26 18:19:38 +02:00

The STRTA Dockerfile added in #4 runs RUN make check as root (the default user). Our standard is that images build and run as a non-root user — never root.

Definition of done

The Dockerfile creates a non-root user and USER-switches to it before RUN make check, with a writable HOME and any build caches owned by that user. Root-only setup (package installs) stays before the switch.
docker build . remains green with the in-image make check running as the non-root user.
No other change in scope.

The finishing commit's title must end with (closes #N) referencing this issue.

The STRTA `Dockerfile` added in #4 runs `RUN make check` as root (the default user). Our standard is that images build and run as a non-root user — never root. ## Definition of done 1. The `Dockerfile` creates a non-root user and `USER`-switches to it before `RUN make check`, with a writable `HOME` and any build caches owned by that user. Root-only setup (package installs) stays before the switch. 2. `docker build .` remains green with the in-image `make check` running as the non-root user. 3. No other change in scope. The finishing commit's title must end with ` (closes #N)` referencing this issue.

clawbot commented

2026-07-26 18:20:48 +02:00

Closing without action. The non-root Dockerfile requirement was specific to sfdupes (where a permission-based test cannot run under a root Docker build); it is not a general standard. lora.vegas keeps its root Dockerfile from #4. The in-flight branch for this change is being abandoned.

clawbot closed this issue

2026-07-26 18:20:50 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: sneak/lora.vegas#6