From 38df95f44087075d24ce916a5882300a7f7fa71f Mon Sep 17 00:00:00 2001
From: Ben Kochie <superq@gmail.com>
Date: Wed, 17 Apr 2019 17:04:19 +0200
Subject: [PATCH] Don't run docker container as root

Run statsd_exporter as `nobody`.

Signed-off-by: Ben Kochie <superq@gmail.com>
---
 Dockerfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Dockerfile b/Dockerfile
index faa0a9a..5875bac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,6 +3,7 @@ LABEL maintainer="The Prometheus Authors <prometheus-developers@googlegroups.com
 
 COPY statsd_exporter /bin/statsd_exporter
 
+USER        nobody
 EXPOSE      9102 9125 9125/udp
 HEALTHCHECK CMD wget --spider -S "http://localhost:9102/metrics" -T 60 2>&1 || exit 1
 ENTRYPOINT  [ "/bin/statsd_exporter" ]