Run docker containers as kaspa

Author: coderofstuff

docker/Dockerfile.kaspa-wallet

@@ -42,10 +42,15 @@ RUN apk --no-cache add \
   libgcc \
   libstdc++ \
   tini \
-  ca-certificates
+  ca-certificates \
+  && addgroup -S kaspa \
+  && adduser -S -G kaspa -h /home/kaspa -s /sbin/nologin kaspa \
+  && mkdir -p /home/kaspa /app \
+  && chown -R kaspa:kaspa /home/kaspa /app
 
-COPY --from=builder /app/kaspa-wallet .
+COPY --from=builder --chown=kaspa:kaspa /app/kaspa-wallet .
 
-USER root
+ENV HOME=/home/kaspa
+USER kaspa
 ENTRYPOINT [ "/sbin/tini", "--" ]
 CMD [ "/app/kaspa-wallet" ]

docker/Dockerfile.kaspad

@@ -42,10 +42,15 @@ RUN apk --no-cache add \
   libgcc \
   libstdc++ \
   tini \
-  ca-certificates
+  ca-certificates \
+  && addgroup -S kaspa \
+  && adduser -S -G kaspa -h /home/kaspa -s /sbin/nologin kaspa \
+  && mkdir -p /home/kaspa /app \
+  && chown -R kaspa:kaspa /home/kaspa /app
 
-COPY --from=builder /app/kaspad .
+COPY --from=builder --chown=kaspa:kaspa /app/kaspad .
 
-USER root
+ENV HOME=/home/kaspa
+USER kaspa
 ENTRYPOINT [ "/sbin/tini", "--" ]
 CMD [ "/app/kaspad" ]

docker/Dockerfile.rothschild

@@ -42,10 +42,15 @@ RUN apk --no-cache add \
   libgcc \
   libstdc++ \
   tini \
-  ca-certificates
+  ca-certificates \
+  && addgroup -S kaspa \
+  && adduser -S -G kaspa -h /home/kaspa -s /sbin/nologin kaspa \
+  && mkdir -p /home/kaspa /app \
+  && chown -R kaspa:kaspa /home/kaspa /app
 
-COPY --from=builder /app/rothschild .
+COPY --from=builder --chown=kaspa:kaspa /app/rothschild .
 
-USER root
+ENV HOME=/home/kaspa
+USER kaspa
 ENTRYPOINT [ "/sbin/tini", "--" ]
 CMD [ "/app/rothschild" ]

docker/Dockerfile.simpa

@@ -42,10 +42,15 @@ RUN apk --no-cache add \
   libgcc \
   libstdc++ \
   tini \
-  ca-certificates
+  ca-certificates \
+  && addgroup -S kaspa \
+  && adduser -S -G kaspa -h /home/kaspa -s /sbin/nologin kaspa \
+  && mkdir -p /home/kaspa /app \
+  && chown -R kaspa:kaspa /home/kaspa /app
 
-COPY --from=builder /app/simpa .
+COPY --from=builder --chown=kaspa:kaspa /app/simpa .
 
-USER root
+ENV HOME=/home/kaspa
+USER kaspa
 ENTRYPOINT [ "/sbin/tini", "--" ]
 CMD [ "/app/simpa" ]