diff --git a/Dockerfile b/Dockerfile index 9e8be1b..6b75bc2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -23,21 +23,19 @@ RUN bun run build FROM oven/bun:1.3 AS release WORKDIR /app -# 创建非 root 用户(Debian 兼容命令) -RUN groupadd --system --gid 1001 nodejs && \ - useradd --system --uid 1001 --gid nodejs --no-create-home --shell /usr/sbin/nologin bun - # 安装 curl(用于健康检查) RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/* +# oven/bun 镜像已预置 bun 用户 (uid 1001),直接使用 + # 复制生产依赖和构建产物 COPY --from=install /app/node_modules ./node_modules COPY --from=build /app/dist ./dist COPY --from=build /app/db ./db COPY --from=build /app/package.json ./ -# 设置权限 -RUN chown -R bun:nodejs /app +# 设置权限(bun 用户已存在,使用其默认组) +RUN chown -R bun:bun /app USER bun # 暴露端口