From 16df2defeebae51b20b7475af32f1485e9355224 Mon Sep 17 00:00:00 2001
From: Bryan Stitt <bryan@llamanodes.com>
Date: Mon, 6 Feb 2023 13:46:45 -0800
Subject: [PATCH] add llama user so bash is happy

---
 Dockerfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 2bbd28d1..e7808922 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -71,6 +71,13 @@ RUN --mount=type=cache,target=/usr/local/cargo/registry \
 #
 FROM debian:bullseye-slim AS runtime
 
+# Create llama user to avoid running container with root
+RUN mkdir /llama \
+    && adduser --home /llama --shell /sbin/nologin --gecos '' --no-create-home --disabled-password --uid 1001 llama \
+    && chown -R llama /llama
+
+USER llama
+
 ENTRYPOINT ["web3_proxy_cli"]
 CMD [ "--config", "/web3-proxy.toml", "proxyd" ]