From a2de9989258a321ffa3ee19e318c44f958dd92fe Mon Sep 17 00:00:00 2001 From: Craig Andrews Date: Thu, 17 Jul 2025 16:45:11 -0400 Subject: [PATCH] Use UID number rather than username in Dockerfile Systems configured to disallow running images as root aren't able to run images that use user name string values for the USER because they can't validate that a named user isn't root. To allow this image to run on such systems, use the uid of the user as the value for USER instead of the username. See: https://github.com/kubernetes/kubernetes/pull/56503 Signed-off-by: Craig Andrews --- 28/dind-rootless/Dockerfile | 2 +- Dockerfile-dind-rootless.template | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/28/dind-rootless/Dockerfile b/28/dind-rootless/Dockerfile index 2df4eb4b3..2c005d419 100644 --- a/28/dind-rootless/Dockerfile +++ b/28/dind-rootless/Dockerfile @@ -52,4 +52,4 @@ RUN set -eux; \ mkdir -p /home/rootless/.local/share/docker; \ chown -R rootless:rootless /home/rootless/.local/share/docker VOLUME /home/rootless/.local/share/docker -USER rootless +USER 1000 diff --git a/Dockerfile-dind-rootless.template b/Dockerfile-dind-rootless.template index 6f6d5c2a0..748b0413a 100644 --- a/Dockerfile-dind-rootless.template +++ b/Dockerfile-dind-rootless.template @@ -43,4 +43,4 @@ RUN set -eux; \ mkdir -p /home/rootless/.local/share/docker; \ chown -R rootless:rootless /home/rootless/.local/share/docker VOLUME /home/rootless/.local/share/docker -USER rootless +USER 100000