docker: don't run executable as root

[Bixilon]

It runs them as user and group 248, just a random numer that I mostly use for my docker users.

(just as note for others, I am also setting the following security compose settings):

    read_only: true
    user: "248:248"
    cap_drop: ["ALL"]
    cap_add: ["NET_BIND_SERVICE"] # not needed if running on port 8080

[Bios-Marcel]

LGTM, just added this comment for myself after understanding how this works 😁

[Bixilon]

Linux doesn't care that there's no user for it.

Kind of a naive comment, afaik there is no such thing as a user in linux, there are just uid and gid. Afaik the user is coming from /etc/passwd, but that is distribution dependent. This image is FROM scratch.

But yah :)

[Bios-Marcel]

Yeah, its more for myself, the technical details dont matter 😁