Merge pull request #5376 from atlanhq/kv-kuberentes-hardening-poc

feat: adding non root user

Author: pr0PM

.github/workflows/maven.yml

@@ -158,4 +158,4 @@ jobs:
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/[email protected]
         with:
-          sarif_file: 'trivy-image-results.sarif'
+          sarif_file: 'trivy-image-results.sarif'

Dockerfile

@@ -50,6 +50,15 @@ COPY atlas-hub/pre-conf/atlas-auth/ /opt/apache-atlas/conf/
 RUN mkdir /opt/apache-atlas/libext
 RUN curl https://repo1.maven.org/maven2/org/jolokia/jolokia-jvm/1.6.2/jolokia-jvm-1.6.2-agent.jar -o /opt/apache-atlas/libext/jolokia-jvm-agent.jar
 
+# Create a non-root user for running Atlas
+RUN groupadd -r atlas && useradd -r -g atlas -d /opt/apache-atlas -s /bin/bash atlas
+
+# Set ownership of the atlas directory to the atlas user
+RUN chown -R atlas:atlas /opt/apache-atlas
+
+# Switch to the non-root user
+USER atlas
+
 RUN cd /opt/apache-atlas/bin \
     && ./atlas_start.py -setup || true