copy artifacts later in the build step with permissions

3 files changed, 6 insertions, 4 deletions

diff --git a/Dockerfile b/Dockerfile
index fd1120f..29fda0e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,8 +12,6 @@ RUN yarn build
 # production stage
 FROM alpine:3.11
 
-COPY --from=build-stage /app/dist /www/
-
 ENV USER darkhttpd
 ENV GROUP darkhttpd
 ENV GID 911
@@ -24,4 +22,6 @@ RUN addgroup -S ${GROUP} -g ${GID} && adduser -D -S -u ${UID} ${USER} ${GROUP} &
 
 USER ${USER}
 
+COPY --from=build-stage --chown=${USER}:${GROUP} /app/dist /www/
+
 ENTRYPOINT ["darkhttpd","/www/", "--no-listing"]
\ No newline at end of file
diff --git a/Dockerfile.arm32v7 b/Dockerfile.arm32v7
index 0b83a06..d1ef138 100644
--- a/Dockerfile.arm32v7
+++ b/Dockerfile.arm32v7
@@ -20,7 +20,6 @@ RUN wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_
 FROM arm32v7/alpine:3.11
 
 COPY --from=qemu qemu-arm-static /usr/bin/
-COPY --from=build-stage /app/dist /www/
 
 ENV USER darkhttpd
 ENV GROUP darkhttpd
@@ -33,4 +32,6 @@ RUN addgroup -S ${GROUP} -g ${GID} && adduser -D -S -u ${UID} ${USER} ${GROUP} &
 
 USER ${USER}
 
+COPY --from=build-stage --chown=${USER}:${GROUP} /app/dist /www/
+
 ENTRYPOINT ["darkhttpd","/www/","--no-listing"]
diff --git a/Dockerfile.arm64v8 b/Dockerfile.arm64v8
index c007d04..2f26d09 100644
--- a/Dockerfile.arm64v8
+++ b/Dockerfile.arm64v8
@@ -20,7 +20,6 @@ RUN wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_
 FROM arm64v8/alpine:3.11
 
 COPY --from=qemu qemu-aarch64-static /usr/bin/
-COPY --from=build-stage /app/dist /www/
 
 ENV USER darkhttpd
 ENV GROUP darkhttpd
@@ -33,4 +32,6 @@ RUN addgroup -S ${GROUP} -g ${GID} && adduser -D -S -u ${UID} ${USER} ${GROUP} &
 
 USER ${USER}
 
+COPY --from=build-stage --chown=${USER}:${GROUP} /app/dist /www/
+
 ENTRYPOINT ["darkhttpd","/www/","--no-listing"]