change to nonroot

Author: mfanjie

httpserver/Dockerfile

@@ -5,5 +5,9 @@ ENV MY_SERVICE_PORT2=80
 ENV MY_SERVICE_PORT3=80
 LABEL multi.label1="value1" multi.label2="value2" other="value3"
 ADD bin/amd64/httpserver /httpserver
-EXPOSE 80
+EXPOSE 8080
+RUN useradd -m --uid 1000 web-admin && \
+  echo "web-admin ALL=NOPASSWD: ALL" >> /etc/sudoers
+RUN chown web-admin /httpserver
+USER web-admin
 ENTRYPOINT ["/httpserver"]

httpserver/Makefile

@@ -1,4 +1,4 @@
-export tag=v1.0-metrics
+export tag=v1.0-nonroot
 root:
 	export ROOT=github.com/cncamp/golang
 

httpserver/main.go

@@ -30,7 +30,7 @@ func main() {
 	mux.Handle("/metrics", promhttp.Handler())
 
 	srv := http.Server{
-		Addr:    ":80",
+		Addr:    ":8080",
 		Handler: mux,
 	}
 	done := make(chan os.Signal, 1)