From 9f7bb8fea182a080e4e008d5e4b200c5fdc98dde Mon Sep 17 00:00:00 2001 From: Vladimir Petko Date: Fri, 4 Oct 2024 09:15:19 +1300 Subject: [PATCH] fix: change GID/UID to 10101 This fixes https://bugs.launchpad.net/ubuntu-docker-images/+bug/2068013 Image tag: ubuntu/jre:17-22.04_44 Digest: sha256:7cb8b71a5655da89654ef10704d67b65768de0ca868d3284c1296d03bf6eaa09 The Chiselled Ubuntu for JRE docker image is running with user with uid 101. It raises a security issue when analyzing the image with a security tool because it might cause a conflict with the host user table (see https://kubesec.io/basics/containers-securitycontext-runasuser/ for more details) To fix this, the uid must be greater than 10000. --- jre/Dockerfile.22.04 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/jre/Dockerfile.22.04 b/jre/Dockerfile.22.04 index 730affa..d8576cf 100644 --- a/jre/Dockerfile.22.04 +++ b/jre/Dockerfile.22.04 @@ -1,8 +1,8 @@ ARG UBUNTU_RELEASE=22.04 ARG USER=app -ARG UID=101 +ARG UID=10101 ARG GROUP=app -ARG GID=101 +ARG GID=10101 ARG CHISEL_VERSION=0.10.0 FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:1582c29f34a48752e406f1a261fe9545fad895da3f6bb4be55bc82485557564e AS builder