Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package cdi-importer-container for 
openSUSE:Factory checked in at 2022-10-14 15:42:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cdi-importer-container (Old)
 and      /work/SRC/openSUSE:Factory/.cdi-importer-container.new.2275 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "cdi-importer-container"

Fri Oct 14 15:42:08 2022 rev:7 rq:1010515 version:unknown

Changes:
--------
--- 
/work/SRC/openSUSE:Factory/cdi-importer-container/cdi-importer-container.changes
    2022-08-05 19:52:19.733661400 +0200
+++ 
/work/SRC/openSUSE:Factory/.cdi-importer-container.new.2275/cdi-importer-container.changes
  2022-10-14 15:43:14.975989565 +0200
@@ -1,0 +2,5 @@
+Thu Oct 13 16:33:59 UTC 2022 - Vasily Ulyanov <vasily.ulya...@suse.com>
+
+- Create an unprivileged user to run as non-root
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ Dockerfile ++++++
--- /var/tmp/diff_new_pack.PL1fm3/_old  2022-10-14 15:43:15.363990213 +0200
+++ /var/tmp/diff_new_pack.PL1fm3/_new  2022-10-14 15:43:15.367990220 +0200
@@ -26,10 +26,19 @@
 # endlabelprefix
 
 RUN zypper -n install \
-           qemu-tools qemu-block-curl skopeo tar util-linux \
-           nbdkit nbdkit-basic-filters nbdkit-gzip-filter \
-           nbdkit-xz-filter nbdkit-curl-plugin \
-           containerized-data-importer-importer
+           containerized-data-importer-importer \
+           curl \
+           nbdkit \
+           nbdkit-basic-filters \
+           nbdkit-curl-plugin \
+           nbdkit-gzip-filter \
+           nbdkit-xz-filter \
+           qemu-block-curl \
+           qemu-tools \
+           shadow \
+           skopeo \
+           tar \
+           util-linux
 
 # nbdkit-vddk-plugin is available only on x86_64
 #!ArchExclusiveLine: x86_64
@@ -37,7 +46,10 @@
               zypper -n install nbdkit-vddk-plugin ; \
               fi;
 
-RUN zypper clean -a
+RUN zypper clean -a && \
+    useradd -u 1001 --create-home -s /bin/bash cdi-importer
 
+WORKDIR /home/cdi-importer
+USER 1001
 ENTRYPOINT [ "/usr/bin/virt-cdi-importer", "-alsologtostderr" ]
 

Reply via email to