VictoriaMetrics/deployment/docker/base/Dockerfile

# See https://medium.com/on-docker/use-multi-stage-builds-to-inject-ca-certs-ad1e8f01de1b
FROM alpine:3.10 as base

RUN apk --update --no-cache add ca-certificates

FROM scratch

COPY --from=base /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
Rootless docker images by default (#358) * Rootless docker images by default * Migrate to rootless base image Co-authored-by: Aliaksandr Valialkin <valyala@gmail.com> 2020-03-27 19:18:32 +00:00			`# See https://medium.com/on-docker/use-multi-stage-builds-to-inject-ca-certs-ad1e8f01de1b`
			`FROM alpine:3.10 as base`

			`RUN apk --update --no-cache add ca-certificates`

			`FROM scratch`

deployment/docker: run docker apps under default user (0, root) in order to preserve backwards compatibility If docker app is upgraded from root to non-root, then the data pointed by `-storageDataPath` or similar flags becomes denied to non-root user after the upgrade. This breaks upgrade path. So revert back to default root user for docker apps. Users may explicitly execute `docker run --user <non_root_user>` for running docker apps under non-root user. 2020-03-28 16:51:05 +00:00			`COPY --from=base /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt`