Fixed the frontend

dbrepo-data-service/Dockerfile

@@ -28,9 +28,9 @@ RUN apk add --no-cache curl bash jq
 
 WORKDIR /app
 
-USER 65534
+USER 1001
 
-COPY --from=build --chown=65534 ./rest-service/target/rest-service-*.jar ./data-service.jar
+COPY --from=build --chown=1001 ./rest-service/target/rest-service-*.jar ./data-service.jar
 
 # non-root port
 EXPOSE 8080

dbrepo-metadata-service/Dockerfile

@@ -34,9 +34,9 @@ RUN apk add --no-cache curl bash jq
 
 WORKDIR /app
 
-USER 65534
+USER 1001
 
-COPY --from=build --chown=65534 ./rest-service/target/dbrepo-metadata-service-rest-service-*.jar ./metadata-service.jar
+COPY --from=build --chown=1001 ./rest-service/target/dbrepo-metadata-service-rest-service-*.jar ./metadata-service.jar
 
 # non-root port
 EXPOSE 8080

dbrepo-ui/Dockerfile

-FROM oven/bun:1.0.26-alpine as build
-MAINTAINER Martin Weise <martin.weise@tuwien.ac.at>
+FROM oven/bun:1.0.26-alpine AS build
 
 WORKDIR /app
 
 COPY ./package.json ./package.json
-COPY ./bun.lockb ./bun.lockb
 
 RUN bun install
 
@@ -27,16 +25,17 @@ COPY ./nuxt.config.ts ./nuxt.config.ts
 RUN bun run build
 
 FROM oven/bun:1.0.26-alpine as runtime
-MAINTAINER Martin Weise <martin.weise@tuwien.ac.at>
 
 ARG APP_VERSION="latest"
 ARG COMMIT=""
 
-USER 65534
+USER 1000
 
 WORKDIR /app
 
-COPY --from=build --chown=65534 /app/.output /app/.output
+COPY --from=build --chown=1000 /app/.output /app/.output
+
+RUN chmod -R 755 /app/.output
 
 ENV NUXT_PUBLIC_VERSION="${APP_VERSION:-}"
 ENV NUXT_PUBLIC_COMMIT="${COMMIT:-}"

helm/dbrepo/values.yaml

@@ -697,7 +697,7 @@ ui:
     runAsGroup: 1000
     runAsNonRoot: true
     allowPrivilegeEscalation: false
-    readOnlyRootFilesystem: false
+    readOnlyRootFilesystem: true
     capabilities:
       drop: [ "ALL" ]
     seccompProfile: