[E00-S02-T05] App runs non-root

Conversation 0 Commits 2 Files Changed 3

+257 -5

2 Commits

Author	SHA1	Message	Date
implementer	6e8ba388a6	test: lock in non-root execution criteria (E00-S02-T05) CI / Frozen lockfile install (pull_request) Successful in 51s Details tests/non-root-user.test.mjs locks in both acceptance criteria: a static assertion that the Dockerfile runtime stage declares a non-root USER (not root/uid 0, 'USER node' exactly), non-vacuous mutation probes, and a Docker-gated real-stack probe that starts the stack and asserts 'id -u' and 'id -un' inside the running app container report a non-root user, with the health endpoint still answering as a regression guard.	2026-08-29 00:41:16 +00:00
implementer	a4cf365098	feat: run the app image as a non-root user (E00-S02-T05) The runtime stage of apps/server/Dockerfile now drops root privileges with 'USER node' — the non-root user (uid/gid 1000) the official Node image ships with — so the app container does not run with root privileges. The server binds port 3000 (>= 1024) and only reads the root-owned files copied above, so no extra user creation or ownership changes are required. compose.yaml header updated: T05 is in scope; T06 (read-only rootfs) and T07 (multi-arch) remain out of scope.	2026-08-29 00:41:10 +00:00

Author

SHA1

Message

Date

implementer

6e8ba388a6

test: lock in non-root execution criteria (E00-S02-T05)

CI / Frozen lockfile install (pull_request) Successful in 51s

Details

tests/non-root-user.test.mjs locks in both acceptance criteria: a static
assertion that the Dockerfile runtime stage declares a non-root USER (not
root/uid 0, 'USER node' exactly), non-vacuous mutation probes, and a
Docker-gated real-stack probe that starts the stack and asserts 'id -u' and
'id -un' inside the running app container report a non-root user, with the
health endpoint still answering as a regression guard.

2026-08-29 00:41:16 +00:00

implementer

a4cf365098

feat: run the app image as a non-root user (E00-S02-T05)

The runtime stage of apps/server/Dockerfile now drops root privileges with
'USER node' — the non-root user (uid/gid 1000) the official Node image ships
with — so the app container does not run with root privileges. The server
binds port 3000 (>= 1024) and only reads the root-owned files copied above,
so no extra user creation or ownership changes are required. compose.yaml
header updated: T05 is in scope; T06 (read-only rootfs) and T07 (multi-arch)
remain out of scope.

2026-08-29 00:41:10 +00:00

[E00-S02-T05] App runs non-root #386