diff --git a/Dockerfile b/Dockerfile index 031e274..ffe4c5a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -74,6 +74,9 @@ RUN for binary in /app/bin/*; do \ xargs -I % sh -c 'mkdir -p $(dirname deps%); cp % deps%;'; \ done +# Create tmp directory with proper permissions +RUN rm -rf /tmp && mkdir -p /tmp && chmod 1777 /tmp + # Build a minimal docker image FROM scratch WORKDIR / @@ -93,6 +96,16 @@ ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt # This is required for Timezone support COPY --from=build /usr/share/zoneinfo/ /usr/share/zoneinfo/ +# Copy tmp directory +COPY --from=build /tmp /tmp + +# chmod for setting permissions on /tmp +COPY --from=build /bin /bin +COPY --from=build /lib/ld-musl-* /lib/ +RUN chmod -R a+rwX /tmp +# hadolint ignore=SC2114,DL3059 +RUN rm -rf /bin /lib + # Copy the app into place COPY --from=build /app/deps / COPY --from=build /app/bin /