Skip to content

Commit d810771

Browse files
committed
fix(docker): pin myuser UID/GID to 990 to prevent drift
The myuser account was created with `groupadd -r` and `useradd -r` which auto-assign system IDs counting downward from 999. When base images add or remove system users (e.g. messagebus), the auto-assigned ID shifts, breaking persistent volume mounts that depend on a stable UID/GID. Pin both UID and GID to 990 across all 6 affected Dockerfiles. Closes #287
1 parent 4aacfc6 commit d810771

6 files changed

Lines changed: 6 additions & 6 deletions

File tree

node-phantomjs/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get purge --auto-remove -y wget \
2323
&& rm -rf /src/*.deb
2424

2525
# Run everything after as non-privileged user to avoid warnings
26-
RUN groupadd -r myuser && useradd -r -g myuser -G audio,video myuser \
26+
RUN groupadd -r -g 990 myuser && useradd -r -u 990 -g myuser -G audio,video myuser \
2727
&& mkdir -p /home/myuser/Downloads \
2828
&& chown -R myuser:myuser /home/myuser
2929
USER myuser

node-playwright-chrome/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ RUN \
3232
--no-install-recommends \
3333
\
3434
# Add user so we don't need --no-sandbox.
35-
&& groupadd -r myuser && useradd -r -g myuser -G audio,video myuser \
35+
&& groupadd -r -g 990 myuser && useradd -r -u 990 -g myuser -G audio,video myuser \
3636
&& mkdir -p /home/myuser/Downloads \
3737
&& chown -R myuser:myuser /home/myuser \
3838
\

node-playwright-firefox/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ RUN sh -c 'echo "deb http://ftp.us.debian.org/debian bookworm main non-free" >>
2525
&& ./register_intermediate_certs.sh \
2626
\
2727
# Add user so we don't need --no-sandbox.
28-
&& groupadd -r myuser && useradd -r -g myuser -G audio,video myuser \
28+
&& groupadd -r -g 990 myuser && useradd -r -u 990 -g myuser -G audio,video myuser \
2929
&& mkdir -p /home/myuser/Downloads \
3030
&& chown -R myuser:myuser /home/myuser \
3131
\

node-playwright-webkit/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ RUN apt-get update \
2121
&& npm install -g yarn \
2222
\
2323
# Add user so we don't need --no-sandbox.
24-
&& groupadd -r myuser && useradd -r -g myuser -G audio,video myuser \
24+
&& groupadd -r -g 990 myuser && useradd -r -u 990 -g myuser -G audio,video myuser \
2525
&& mkdir -p /home/myuser/Downloads \
2626
&& chown -R myuser:myuser /home/myuser \
2727
# Globally disable the update-notifier.

node-playwright/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ RUN apt-get update \
3434
&& apt install --fix-missing -yq ./google-chrome-stable_current_amd64.deb && rm ./google-chrome-stable_current_amd64.deb \
3535
\
3636
# Add user so we don't need --no-sandbox.
37-
&& groupadd -r myuser && useradd -r -g myuser -G audio,video myuser \
37+
&& groupadd -r -g 990 myuser && useradd -r -u 990 -g myuser -G audio,video myuser \
3838
&& mkdir -p /home/myuser/Downloads \
3939
&& chown -R myuser:myuser /home/myuser \
4040
\

node-puppeteer-chrome/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ RUN apt-get update \
3939
&& apt install --fix-missing -yq ./google-chrome-stable_current_amd64.deb && rm ./google-chrome-stable_current_amd64.deb \
4040
\
4141
# Add user so we don't need --no-sandbox.
42-
&& groupadd -r myuser && useradd -r -g myuser -G audio,video myuser \
42+
&& groupadd -r -g 990 myuser && useradd -r -u 990 -g myuser -G audio,video myuser \
4343
&& mkdir -p /home/myuser/Downloads \
4444
&& chown -R myuser:myuser /home/myuser \
4545
\

0 commit comments

Comments
 (0)