Skip to content

Commit 640a345

Browse files
committed
fix(images): remove image-specific owner and mode set for gateway binary
1 parent 96d909d commit 640a345

1 file changed

Lines changed: 1 addition & 7 deletions

File tree

deploy/docker/Dockerfile.gateway

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -26,13 +26,7 @@ ARG TARGETARCH
2626

2727
WORKDIR /app
2828

29-
# --chmod=0550 preserves the executable bit through actions/upload-artifact +
30-
# download-artifact (which strip exec perms during the roundtrip) without
31-
# granting world-execute. --chown=nvs:nvs matches the image's only defined
32-
# non-root user (`nvs:1000`, the NVIDIA distroless convention) and aligns
33-
# with the Helm chart's `securityContext.runAsUser: 1000`, which overrides
34-
# the Dockerfile's USER at runtime.
35-
COPY --chown=nvs:nvs --chmod=0550 deploy/docker/.build/prebuilt-binaries/${TARGETARCH}/openshell-gateway /usr/local/bin/openshell-gateway
29+
COPY deploy/docker/.build/prebuilt-binaries/${TARGETARCH}/openshell-gateway /usr/local/bin/openshell-gateway
3630

3731
USER nvs:nvs
3832
EXPOSE 8080

0 commit comments

Comments
 (0)