From 7abb8db1e4235cc24be08aac76bc5710adb72a56 Mon Sep 17 00:00:00 2001 From: Adrien Bouvais Date: Sat, 15 Aug 2026 16:26:41 +0200 Subject: [PATCH] Removed comments --- images/base/dockerfile | 2 -- images/jupyter/dockerfile | 1 - 2 files changed, 3 deletions(-) diff --git a/images/base/dockerfile b/images/base/dockerfile index fe12d22..c395a96 100644 --- a/images/base/dockerfile +++ b/images/base/dockerfile @@ -4,14 +4,12 @@ LABEL org.opencontainers.image.title="tenant-base" \ org.opencontainers.image.description="Hardened base image for tenant workspaces" \ org.opencontainers.image.source="https://git.bouvais.lu/adrien/" -# System deps only — keep this layer stable so it's rarely rebuilt RUN apt-get update && apt-get install -y --no-install-recommends \ ca-certificates \ curl \ tini \ && rm -rf /var/lib/apt/lists/* -# Non-root user, fixed UID/GID for predictable K8s securityContext RUN groupadd --gid 1000 appuser \ && useradd --uid 1000 --gid appuser --shell /bin/bash --create-home appuser diff --git a/images/jupyter/dockerfile b/images/jupyter/dockerfile index 34fb8ad..22532e7 100644 --- a/images/jupyter/dockerfile +++ b/images/jupyter/dockerfile @@ -10,7 +10,6 @@ COPY --chown=appuser:appuser requirements.txt /tmp/requirements.txt RUN pip install --no-cache-dir -r /tmp/requirements.txt \ && rm /tmp/requirements.txt -# No secrets baked in — S3 creds come from a mounted K8s Secret / env at runtime USER appuser WORKDIR /home/appuser/work