non priv runner (#6)

* non priv runner
nismod · Feb 20, 2023 · 3054655 · 3054655
1 parent 95cd5f6
commit 3054655
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 4 deletions.
diff --git a/.github/workflows/build_dev.yaml b/.github/workflows/build_dev.yaml
@@ -8,7 +8,7 @@ on:
       - develop
 
 env:
-  VERSION: 0.2.1
+  VERSION: 0.2.2
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
 

diff --git a/.github/workflows/build_prod_and_release.yaml b/.github/workflows/build_prod_and_release.yaml
@@ -8,7 +8,7 @@ on:
       - master
 
 env:
-  VERSION: 0.2.1
+  VERSION: 0.2.2
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
 

diff --git a/Dockerfile b/Dockerfile
@@ -23,5 +23,9 @@ ENV PYTHONPATH "${PYTHONPATH}:/usr/src/app/"
 # copy project
 COPY . .
 
+# Setup the Executing User
+RUN addgroup autopkg && adduser -SHD autopkg -G autopkg && \
+    chown -R autopkg:autopkg /usr/src/app
+
 # Run unit tests
 RUN python3 -m unittest discover /usr/src/app/tests/dataproc/unit
diff --git a/docker-compose.yaml b/docker-compose.yaml
@@ -42,7 +42,8 @@ services:
       CELERY_RESULT_BACKEND: redis://redis
 
   dataproc:
-    image: ghcr.io/nismod/irv-autopkg:0.2.0-dev
+    image: ghcr.io/nismod/irv-autopkg:0.2.2
+    user: autopkg
     build: .
     volumes:
       - ./data/packages:/data/packages
@@ -54,7 +55,7 @@ services:
     command: celery --app dataproc.tasks worker
 
   api:
-    image: ghcr.io/nismod/irv-autopkg:0.2.0-dev
+    image: ghcr.io/nismod/irv-autopkg:0.2.2
     build: .
     volumes:
       - ./data/packages:/data/packages