27 lines
575 B
Docker
27 lines
575 B
Docker
FROM ubuntu:22.04
|
|
|
|
# MEDIUM: No USER directive - runs as root
|
|
# MEDIUM: Using latest tag implicitly (ubuntu:22.04 is ok, but shows pattern)
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y nginx curl && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# HIGH: Installing sudo (not needed in containers)
|
|
RUN apt-get update && apt-get install -y sudo
|
|
|
|
# Creating files as root
|
|
RUN mkdir -p /app/data && \
|
|
echo "config" > /app/config.txt
|
|
|
|
COPY app.sh /app/
|
|
RUN chmod +x /app/app.sh
|
|
|
|
WORKDIR /app
|
|
|
|
# MEDIUM: No HEALTHCHECK defined
|
|
EXPOSE 8080
|
|
|
|
# Running as root (uid 0)
|
|
CMD ["/app/app.sh"]
|