docker: allow configuring UID/GID used inside the containers

.env.example

@@ -21,6 +21,11 @@ API_PORT=3000
 # Only required if relevant feature is used
 #PHISHERMAN_API_KEY=
 
+# The user ID and group ID that should be used within the Docker containers
+# This should match your own user ID and group ID. Run `id -u` and `id -g` to find them.
+DOCKER_USER_UID=
+DOCKER_USER_GID=
+
 #
 # DOCKER (DEVELOPMENT)
 #

docker-compose.production.yml

@@ -26,39 +26,51 @@ services:
     command: --authentication-policy=mysql_native_password
 
   prepare_backend:
-    image: node:16.16
+    build:
+      context: ./docker/production/node
+      args:
+        DOCKER_USER_UID: ${DOCKER_USER_UID:?Missing DOCKER_USER_UID}
+        DOCKER_USER_GID: ${DOCKER_USER_GID:?Missing DOCKER_USER_GID}
     depends_on:
       - mysql
     volumes:
       - ./:/zeppelin
-    user: node
     command: |-
       bash -c "cd /zeppelin/backend && npm ci && npm run build && npm run migrate-prod"
 
   api:
-    image: node:16.16
+    build:
+      context: ./docker/production/node
+      args:
+        DOCKER_USER_UID: ${DOCKER_USER_UID:?Missing DOCKER_USER_UID}
+        DOCKER_USER_GID: ${DOCKER_USER_GID:?Missing DOCKER_USER_GID}
     restart: on-failure
     depends_on:
       - prepare_backend
     volumes:
       - ./:/zeppelin
-    user: node
     command: ["/bin/bash", "/zeppelin/docker/production/start-api.sh"]
 
   bot:
-    image: node:16.16
+    build:
+      context: ./docker/production/node
+      args:
+        DOCKER_USER_UID: ${DOCKER_USER_UID:?Missing DOCKER_USER_UID}
+        DOCKER_USER_GID: ${DOCKER_USER_GID:?Missing DOCKER_USER_GID}
     restart: on-failure
     depends_on:
       - prepare_backend
     volumes:
       - ./:/zeppelin
-    user: node
     command: ["/bin/bash", "/zeppelin/docker/production/start-bot.sh"]
 
   build_dashboard:
-    image: node:16.16
+    build:
+      context: ./docker/production/node
+      args:
+        DOCKER_USER_UID: ${DOCKER_USER_UID:?Missing DOCKER_USER_UID}
+        DOCKER_USER_GID: ${DOCKER_USER_GID:?Missing DOCKER_USER_GID}
     volumes:
       - ./:/zeppelin
-    user: node
     command: |-
       bash -c "cd /zeppelin/dashboard && npm ci && npm run build"

docker/production/node/Dockerfile

@@ -0,0 +1,10 @@
+FROM node:16.16
+
+ARG DOCKER_USER_UID
+ARG DOCKER_USER_GID
+
+# This custom Dockerfile is needed for the Node image so we can change the uid/gid used for the node user
+# See https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#non-root-user
+RUN groupmod -g "${DOCKER_USER_GID}" node && usermod -u "${DOCKER_USER_UID}" -g "${DOCKER_USER_GID}" node
+
+USER node