From 43a5b24dcc22af3ec4c0bb76b45a2706f898421f Mon Sep 17 00:00:00 2001 From: Devin Buhl Date: Sun, 5 Jan 2025 07:36:57 -0500 Subject: [PATCH] fix: Container: remove modifying capabilities of `/usr/bin/node` (#25456) --- docker/Dockerfile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/docker/Dockerfile b/docker/Dockerfile index c85311742..9d805a5c1 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -12,7 +12,7 @@ FROM linux-${TARGETARCH}-alpine AS base ENV NODE_ENV=production WORKDIR /app -RUN apk add --no-cache tzdata eudev tini nodejs libcap +RUN apk add --no-cache tzdata eudev tini nodejs # Dependencies and build FROM base AS deps @@ -47,7 +47,6 @@ COPY package.json LICENSE index.js data/configuration.example.yaml ./ COPY docker/docker-entrypoint.sh /usr/local/bin/ RUN chmod +x /usr/local/bin/docker-entrypoint.sh -RUN setcap 'cap_net_bind_service=+ep' /usr/bin/node RUN mkdir /app/data