From e1884fe1a630f8fb68a61de383f69aa33d1441f1 Mon Sep 17 00:00:00 2001 From: tiennm99 Date: Sun, 5 Oct 2025 01:07:42 +0700 Subject: [PATCH] Run Couchbase as non-root user and set data volume Updates the Dockerfile to change ownership of /opt/couchbase/var, declare it as a volume, and run the container as the 'couchbase' user for improved security and data persistence. --- couchbase-2.5/Dockerfile | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/couchbase-2.5/Dockerfile b/couchbase-2.5/Dockerfile index 3be13f0..a9760c0 100644 --- a/couchbase-2.5/Dockerfile +++ b/couchbase-2.5/Dockerfile @@ -19,7 +19,12 @@ RUN apt-get install -y librtmp0 RUN groupadd -g 1000 couchbase && useradd couchbase -u 1000 -g couchbase -M RUN export INSTALL_DONT_START_SERVER=1 && \ dpkg -i ./$CB_PACKAGE && rm -f ./$CB_PACKAGE +RUN chown -R couchbase:couchbase /opt/couchbase/var EXPOSE 8091 8092 11210 11211 +VOLUME /opt/couchbase/var + +USER couchbase + CMD ["couchbase-server", "--", "-noinput"]