From 6f59f15cb56b7bb2ff2e9ae80eb70fee9cf8006d Mon Sep 17 00:00:00 2001 From: Yuneng Jiang Date: Thu, 2 Apr 2026 00:26:31 -0700 Subject: [PATCH] fix(docker): add non-root USER and HEALTHCHECK to Dockerfile.custom_ui Co-Authored-By: Claude Opus 4.6 (1M context) --- docker/Dockerfile.custom_ui | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docker/Dockerfile.custom_ui b/docker/Dockerfile.custom_ui index 0b94ae0195b..b10e099db09 100644 --- a/docker/Dockerfile.custom_ui +++ b/docker/Dockerfile.custom_ui @@ -70,8 +70,15 @@ WORKDIR /app RUN sed -i 's/\r$//' docker/entrypoint.sh && chmod +x docker/entrypoint.sh RUN sed -i 's/\r$//' docker/prod_entrypoint.sh && chmod +x docker/prod_entrypoint.sh +# Run as non-root user +RUN groupadd --gid 1000 appuser && useradd --uid 1000 --gid 1000 --no-create-home appuser +USER appuser + # Expose the necessary port EXPOSE 4000/tcp +HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \ + CMD ["python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:4000/health')"] + # Override the CMD instruction with your desired command and arguments CMD ["--port", "4000", "--config", "config.yaml", "--detailed_debug"] \ No newline at end of file