@@ -14,9 +14,10 @@ ENV DOTNET_NOLOGO=1 \
1414 DOTNET_CLI_TELEMETRY_OPTOUT=1 \
1515 DOTNET_SKIP_FIRST_TIME_EXPERIENCE=1 \
1616 DOTNET_EnableWriteXorExecute=0 \
17- HOME=/home/runneruser \
18- DOTNET_CLI_HOME=/home/runneruser \
19- NUGET_PACKAGES=/home/runneruser/.nuget/packages
17+ HOME=/tmp/dotnet-home \
18+ DOTNET_CLI_HOME=/tmp/dotnet-home \
19+ NUGET_PACKAGES=/tmp/nuget/packages \
20+ NUGET_CONFIG_FILE=/tmp/nuget/NuGet.Config
2021
2122WORKDIR /usr/src/app
2223
@@ -26,10 +27,12 @@ RUN apt-get update \
2627 && rm -rf /var/lib/apt/lists/*
2728
2829# Create user + writable HOME and workdir
29- RUN groupadd -r runneruser \
30- && useradd -r -g runneruser -d /home/runneruser -s /usr/sbin/nologin runneruser \
31- && mkdir -p /home/runneruser/.nuget/packages /home/runneruser/.nuget/NuGet /usr/src/app \
32- && chown -R runneruser:runneruser /home/runneruser /usr/src/app
30+ RUN groupadd -g 10001 -r runneruser \
31+ && useradd -r -g runneruser -u 10001 -m -d /home/runneruser -s /usr/sbin/nologin runneruser \
32+ && mkdir -p /tmp/dotnet-home /tmp/nuget/packages /tmp/nuget /usr/src/app \
33+ && touch /tmp/nuget/NuGet.Config \
34+ && chown -R runneruser:runneruser /home/runneruser /usr/src/app /tmp/dotnet-home /tmp/nuget \
35+ && chmod -R a+rwX /tmp/dotnet-home /tmp/nuget /usr/src/app
3336
3437# Switch to non-root BEFORE restore so any generated dirs are owned correctly
3538USER runneruser
0 commit comments