fix: revert uid=1000 pin — compose sets user: "0" instead

In rootless Docker, uid=0 in-container = cldrzd on host (not privileged).
Pinning to uid=1000 in-container mapped to host uid=100999 (phantom UID),
which cannot write to the cldrzd-owned data directory.

The Dockerfile USER directive is overridden by compose user: "0" anyway,
so revert to a standard non-root app user without explicit uid/gid.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
davidtio
2026-02-28 19:05:19 +08:00
parent 776a6e8973
commit 9f0ecf67da

View File

@@ -19,7 +19,7 @@ RUN sbt "set test in assembly := false" assembly
# === Runtime stage ===
FROM eclipse-temurin:25-jre-alpine
RUN addgroup -g 1000 -S app && adduser -u 1000 -S app -G app
RUN addgroup -S app && adduser -S app -G app
RUN mkdir -p /data && chown app:app /data
WORKDIR /app