Configure non-privileged user, update to Go 1.9

fiorix · Sep 12, 2017 · b65b9bf · b65b9bf
1 parent 25c7c50
commit b65b9bf
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,10 +1,17 @@
-FROM golang:1.7
+FROM golang:1.9
 
 COPY cmd/freegeoip/public /var/www
 
 ADD . /go/src/github.com/fiorix/freegeoip
-RUN cd /go/src/github.com/fiorix/freegeoip/cmd/freegeoip && go get && go install
+RUN \
+	cd /go/src/github.com/fiorix/freegeoip/cmd/freegeoip && \
+	go get -d && go install && \
+	apt-get update && apt-get install -y libcap2-bin && \
+	setcap cap_net_bind_service=+ep /go/bin/freegeoip && \
+	apt-get clean && rm -rf /var/lib/apt/lists/* && \
+	useradd -ms /bin/bash freegeoip
 
+USER freegeoip
 ENTRYPOINT ["/go/bin/freegeoip"]
 
 EXPOSE 8080