From 99b588cf108e0e13066195d3dacd8e3fa6c53853 Mon Sep 17 00:00:00 2001
From: Vishva <vishva.prasad@duk.ac.in>
Date: Fri, 19 Dec 2025 07:40:54 +0530
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F=20|=20chore:=20update=20D?=
 =?UTF-8?q?ockerfile=20to=20set=20proper=20permissions=20and=20user=20for?=
 =?UTF-8?q?=20APISIX=20to=20run=20in=20Openshift=20instead=20of=20anyuid?=
 =?UTF-8?q?=20command?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 debian-dev/Dockerfile | 8 ++++++++
 debian/Dockerfile     | 4 +++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/debian-dev/Dockerfile b/debian-dev/Dockerfile
index 437eae48..183821cd 100644
--- a/debian-dev/Dockerfile
+++ b/debian-dev/Dockerfile
@@ -67,6 +67,14 @@ WORKDIR /usr/local/apisix
 
 ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin
 
+RUN groupadd --system --gid 636 apisix \
+    && useradd --system --gid apisix --no-create-home --shell /usr/sbin/nologin --uid 636 apisix \
+    && chown -R apisix:apisix /usr/local/apisix \
+    && chgrp -R 0 /usr/local/apisix \
+    && chmod -R g=u /usr/local/apisix
+
+USER apisix
+
 EXPOSE 9080 9443
 
 COPY ./docker-entrypoint.sh /docker-entrypoint.sh
diff --git a/debian/Dockerfile b/debian/Dockerfile
index 706b250d..9528e241 100644
--- a/debian/Dockerfile
+++ b/debian/Dockerfile
@@ -53,7 +53,9 @@ ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/
 
 RUN groupadd --system --gid 636 apisix \
     && useradd --system --gid apisix --no-create-home --shell /usr/sbin/nologin --uid 636 apisix \
-    && chown -R apisix:apisix /usr/local/apisix
+    && chown -R apisix:apisix /usr/local/apisix \
+    && chgrp -R 0 /usr/local/apisix \
+    && chmod -R g=u /usr/local/apisix
 
 USER apisix