From 377bc12cf961d11918d0e921ea0b3cd172395f48 Mon Sep 17 00:00:00 2001
From: yukaidi <yukaidi@duck.com>
Date: Fri, 29 May 2026 02:55:57 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20Dockerfile=20=E6=B7=BB=E5=8A=A0=E9=9D=9E?=
 =?UTF-8?q?=20root=20=E7=94=A8=E6=88=B7=E8=BF=90=E8=A1=8C=E5=BA=94?=
 =?UTF-8?q?=E7=94=A8=EF=BC=8C=E6=8F=90=E5=8D=87=E5=AE=B9=E5=99=A8=E5=AE=89?=
 =?UTF-8?q?=E5=85=A8=E6=80=A7?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Dockerfile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 8d50655..853eb64 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,4 +14,8 @@ RUN unzip netdisk-fast-download-bin.zip && \
 
 EXPOSE 6400 6401
 
+RUN addgroup --system appgroup && adduser --system --ingroup appgroup appuser && \
+    chown -R appuser:appgroup /app
+USER appuser
+
 ENTRYPOINT ["sh", "run.sh"]