extras
/
coder-enterprise-images
mirror of https://github.com/coder/enterprise-images.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

chore: switch from named to numeric uids (#133) 

Clusters that have an admission controller that requires containers
to run as a non-root user need the default user of the image to be
declared as a numeric uid, so that the constraint can be applied
prior to starting the container.

Change "USER root" to "USER 0" and "USER coder" to "USER 1000"
This commit is contained in:
Jonathan Yu 2022-02-16 11:01:10 -08:00 committed by GitHub
parent 90bcfba8c3
commit e760ec7474
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
29 changed files with 54 additions and 54 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
images/android/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-java:ubuntu
# Run everything as root
USER root
USER 0
ENV ANDROID_SDK_ROOT /usr/lib/android-sdk
ENV ANDROID_HOME ${ANDROID_SDK_ROOT}
@ -38,4 +38,4 @@ RUN add-apt-repository ppa:maarten-fonville/android-studio && \
ln -s /opt/android-studio/bin/studio.sh /usr/local/bin/studio
# Set back to coder user
USER coder
USER 1000

2
images/base/Dockerfile.arch
View File

@ -41,7 +41,7 @@ RUN useradd coder \
--user-group && \
echo "coder ALL=(ALL) NOPASSWD:ALL" >>/etc/sudoers.d/nopasswd
USER coder
USER 1000
# install Homebrew, must be as a non-root user
RUN /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

2
images/base/Dockerfile.centos
View File

@ -42,7 +42,7 @@ RUN useradd coder \
--user-group && \
echo "coder ALL=(ALL) NOPASSWD:ALL" >>/etc/sudoers.d/nopasswd
USER coder
USER 1000
# install Homebrew, must be as a non-root user
RUN /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

2
images/base/Dockerfile.ubuntu
View File

@ -42,7 +42,7 @@ RUN useradd coder \
--user-group && \
echo "coder ALL=(ALL) NOPASSWD:ALL" >>/etc/sudoers.d/nopasswd
USER coder
USER 1000
# install Homebrew, must be as a non-root user
RUN /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

4
images/clion/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:centos
# Run everything as root
USER root
USER 0
# Install clion.
RUN mkdir -p /opt/clion
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=CL&latest&distribution=
RUN ln -s /opt/clion/bin/clion.sh /usr/bin/clion
# Set back to coder user
USER coder
USER 1000

4
images/clion/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:ubuntu
# Run everything as root
USER root
USER 0
# Install clion.
RUN mkdir -p /opt/clion
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=CL&latest&distribution=
RUN ln -s /opt/clion/bin/clion.sh /usr/bin/clion
# Set back to coder user
USER coder
USER 1000

4
images/dataSpell/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:centos
# Run everything as root
USER root
USER 0
# Install DataSpell.
RUN mkdir -p /opt/dataspell
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/python/jetbrains-data-spell-213.2094
RUN ln -s /opt/dataspell/bin/dataspell.sh /usr/bin/dataspell
# Set back to coder user
USER coder
USER 1000

4
images/dataSpell/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:ubuntu
# Run everything as root
USER root
USER 0
# Install DataSpell.
RUN mkdir -p /opt/dataspell
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/python/jetbrains-data-spell-213.2094
RUN ln -s /opt/dataspell/bin/dataspell.sh /usr/bin/dataspell
# Set back to coder user
USER coder
USER 1000

4
images/goland/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-golang:centos
# Run everything as root
USER root
USER 0
# Packages required for multi-editor support
RUN yum update -y && yum install -y \
@ -21,4 +21,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=GO&latest&distribution=
RUN ln -s /opt/goland/bin/goland.sh /usr/bin/goland
# Set back to coder user
USER coder
USER 1000

4
images/goland/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-golang:ubuntu
# Run everything as root
USER root
USER 0
# Packages required for multi-editor support
RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y \
@ -19,4 +19,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=GO&latest&distribution=
RUN ln -s /opt/goland/bin/goland.sh /usr/bin/goland
# Set back to coder user
USER coder
USER 1000

4
images/golang/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:centos
# Run everything as root
USER root
USER 0
# Install go
RUN curl -L "https://dl.google.com/go/go1.17.1.linux-amd64.tar.gz" | tar -C /usr/local -xzvf -
@ -15,4 +15,4 @@ ENV GOBIN $GOPATH/bin
ENV PATH $PATH:$GOBIN
# Set back to coder user
USER coder
USER 1000

4
images/golang/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:ubuntu
# Run everything as root
USER root
USER 0
# Install go
RUN curl -L "https://dl.google.com/go/go1.17.1.linux-amd64.tar.gz" | tar -C /usr/local -xzvf -
@ -15,4 +15,4 @@ ENV GOBIN $GOPATH/bin
ENV PATH $PATH:$GOBIN
# Set back to coder user
USER coder
USER 1000

4
images/intellij/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-java:centos
# Run everything as root
USER root
USER 0
# Packages required for multi-editor support
RUN yum update -y && yum install -y \
@ -21,4 +21,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=IIC&latest&distribution
RUN ln -s /opt/idea/bin/idea.sh /usr/bin/intellij-idea-ultimate
# Set back to coder user
USER coder
USER 1000

4
images/intellij/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-java:ubuntu
# Run everything as root
USER root
USER 0
# Packages required for multi-editor support
RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y \
@ -19,4 +19,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=IIC&latest&distribution
RUN ln -s /opt/idea/bin/idea.sh /usr/bin/intellij-idea-community
# Set back to coder user
USER coder
USER 1000

4
images/java/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:centos
# Run everything as root
USER root
USER 0
# Install JDK (OpenJDK 8)
RUN yum install -y java-1.8.0-openjdk-devel
@ -52,4 +52,4 @@ RUN mkdir -p /usr/share/gradle /usr/share/gradle/ref \
ENV PATH $PATH:$GRADLE_HOME/bin
# Set back to coder user
USER coder
USER 1000

4
images/java/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:ubuntu
# Run everything as root
USER root
USER 0
# Install JDK (OpenJDK 8)
RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y openjdk-11-jdk
@ -52,4 +52,4 @@ RUN mkdir -p /usr/share/gradle /usr/share/gradle/ref \
ENV PATH $PATH:$GRADLE_HOME/bin
# Set back to coder user
USER coder
USER 1000

4
images/jupyter/Dockerfile.centos
View File

@ -1,11 +1,11 @@
FROM codercom/enterprise-base:centos
# Run everything as root
USER root
USER 0
# Install jupyter
RUN pip3 install jupyter-core==4.7.1 && \
pip3 install jupyterlab
# Set back to coder user
USER coder
USER 1000

4
images/jupyter/Dockerfile.ubuntu
View File

@ -1,11 +1,11 @@
FROM codercom/enterprise-base:ubuntu
# Run everything as root
USER root
USER 0
# Install jupyter
RUN pip3 install jupyter-core==4.7.1 && \
pip3 install jupyterlab
# Set back to coder user
USER coder
USER 1000

4
images/multieditor/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:centos
# Run everything as root
USER root
USER 0
# Packages required for multi-editor support
RUN yum update -y && yum install -y \
@ -14,4 +14,4 @@ RUN yum update -y && yum install -y \
libGL
# Set back to coder user
USER coder
USER 1000

4
images/multieditor/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:ubuntu
# Run everything as root
USER root
USER 0
# Packages required for multi-editor support
RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y \
@ -12,4 +12,4 @@ RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y \
libgtk-3-0
# Set back to coder user
USER coder
USER 1000

4
images/node/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:centos
# Run everything as root
USER root
USER 0
# Install whichever Node version is LTS
RUN curl -sL https://rpm.nodesource.com/setup_lts.x | bash -
@ -12,4 +12,4 @@ RUN curl --silent --location https://dl.yarnpkg.com/rpm/yarn.repo | tee /etc/yum
RUN yum install -y yarn
# Set back to coder user
USER coder
USER 1000

4
images/node/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:ubuntu
# Run everything as root
USER root
USER 0
# Install whichever Node version is LTS
RUN curl -sL https://deb.nodesource.com/setup_lts.x | bash -
@ -13,4 +13,4 @@ RUN echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources
RUN DEBIAN_FRONTEND="noninteractive" apt-get update && apt-get install -y yarn
# Set back to coder user
USER coder
USER 1000

4
images/pycharm/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:centos
# Run everything as root
USER root
USER 0
# Install pycharm.
RUN mkdir -p /opt/pycharm
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=PCC&latest&distribution
RUN ln -s /opt/pycharm/bin/pycharm.sh /usr/bin/pycharm-community
# Set back to coder user
USER coder
USER 1000

4
images/pycharm/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:ubuntu
# Run everything as root
USER root
USER 0
# Install pycharm.
RUN mkdir -p /opt/pycharm
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=PCC&latest&distribution
RUN ln -s /opt/pycharm/bin/pycharm.sh /usr/bin/pycharm-community
# Set back to coder user
USER coder
USER 1000

4
images/ruby/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:centos
# Run everything as root
USER root
USER 0
# Install OpenSSL library
RUN yum install -y openssl-devel
@ -14,4 +14,4 @@ RUN chmod +x /tmp/install-ruby.sh && /tmp/install-ruby.sh
RUN gem install bundler
# Set back to coder user
USER coder
USER 1000

4
images/ruby/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-base:ubuntu
# Run everything as root
USER root
USER 0
# Install OpenSSL library
RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y libssl-dev
@ -11,4 +11,4 @@ COPY ./install-ruby.sh /tmp
RUN chmod +x /tmp/install-ruby.sh && /tmp/install-ruby.sh
# Set back to coder user
USER coder
USER 1000

2
images/vnc/Dockerfile.ubuntu
View File

@ -104,7 +104,7 @@ RUN $VNC_SETUP_SCRIPTS/set_user_permission.sh $VNC_ROOT_DIR \
COPY ["./coder", "/coder"]
RUN chmod +x /coder/configure
USER coder
USER 1000
RUN $VNC_SETUP_SCRIPTS/no_vnc.sh

4
images/webstorm/Dockerfile.centos
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:centos
# Run everything as root
USER root
USER 0
# Install webstorm.
RUN mkdir -p /opt/webstorm
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=WS&latest&distribution=
RUN ln -s /opt/webstorm/bin/webstorm.sh /usr/bin/webstorm
# Set back to coder user
USER coder
USER 1000

4
images/webstorm/Dockerfile.ubuntu
View File

@ -1,7 +1,7 @@
FROM codercom/enterprise-multieditor:ubuntu
# Run everything as root
USER root
USER 0
# Install webstorm.
RUN mkdir -p /opt/webstorm
@ -11,4 +11,4 @@ RUN curl -L "https://download.jetbrains.com/product?code=WS&latest&distribution=
RUN ln -s /opt/webstorm/bin/webstorm.sh /usr/bin/webstorm
# Set back to coder user
USER coder
USER 1000