docker image where agent is run as "agent" user

vub-hpc · Oct 21, 2024 · 1af74e1 · 1af74e1
1 parent d64e780
commit 1af74e1
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/azure-pipelines-azureagent/Dockerfile b/azure-pipelines-azureagent/Dockerfile
@@ -28,4 +28,13 @@ RUN tar -xzf $TARBALL && rm $TARBALL
 COPY files/start.sh .
 RUN chmod +x start.sh run.sh
 
+# Create agent user and set up home directory
+RUN groupadd -g 477 agent
+RUN useradd -u 950 -g 477 -m -d /home/agent agent
+RUN chown -R agent:agent /azp /home/agent
+
+USER agent
+# Another option is to run the agent as root.
+# ENV AGENT_ALLOW_RUNASROOT="true"
+
 ENTRYPOINT [ "./start.sh" ]
diff --git a/azure-pipelines-azureagent/files/start.sh b/azure-pipelines-azureagent/files/start.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 set -e
 
-export AGENT_ALLOW_RUNASROOT="1"
+#export AGENT_ALLOW_RUNASROOT="1"
 
 print_header() {
   lightcyan='\033[1;36m'