Docker Harden - Githubissues

Atos-Research-and-Innovation / IoTagent-LoRaWAN

FIWARE IoT Agent for LoRaWAN protocol (with CayenneLpp and CBOR data models)

Other

34 stars 40 forks source link

Closed jason-fox closed 3 years ago

jason-fox commented 3 years ago

This PR fixes several issues raised by docker/docker-bench-security

Add missing HEALTHCHECK - currently just a ping to /iota/about, but could be expanded
Add standard metadata build LABEL (see opencontainers.org)
Remove deprecated MAINTAINER - replace with LABEL
Create two-stage build process using a Distroless build:
- Remove disto
- Run as anonymous user
- Set NODE_ENV to development/production

jason-fox commented 3 years ago

To maintain docker secrets support, this PR should be processed after https://github.com/telefonicaid/iotagent-node-lib/pull/885

jason-fox commented 3 years ago

Maintainer should be just "Atos" instead of "Atos Spain"

Fixed 2b127bc