Accepting request 1010512 from home:vulyanov:branches:Virtualization

- Create an unprivileged user to run as non-root
- Align the installed packages with the upstream

OBS-URL: https://build.opensuse.org/request/show/1010512
OBS-URL: https://build.opensuse.org/package/show/Virtualization/cdi-uploadserver-container?expand=0&rev=14

Dockerfile

@@ -23,8 +23,16 @@ LABEL org.opensuse.reference="%%REGISTRY%%/%%TAGPREFIX%%/cdi-uploadserver:%%PKG_
 # endlabelprefix
 
 RUN zypper -n install \
-           qemu-tools qemu-block-curl tar util-linux \
+           containerized-data-importer-uploadserver \
-           containerized-data-importer-uploadserver && \
+           curl \
-    zypper clean -a
+           libnbd \
+           qemu-tools \
+           shadow \
+           tar \
+           util-linux && \
+    zypper clean -a && \
+    useradd -u 1001 --create-home -s /bin/bash cdi-uploadserver
 
+WORKDIR /home/cdi-uploadserver
+USER 1001
 ENTRYPOINT [ "/usr/bin/virt-cdi-uploadserver", "-alsologtostderr" ]

cdi-uploadserver-container.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Oct 13 14:52:40 UTC 2022 - Vasily Ulyanov <vasily.ulyanov@suse.com>
+
+- Create an unprivileged user to run as non-root
+- Align the installed packages with the upstream
+
 -------------------------------------------------------------------
 Thu Aug  4 07:48:37 UTC 2022 - Vasily Ulyanov <vasily.ulyanov@suse.com>