From e9bea322fac59e0ff8a0fc5b8609ad80eca081f7 Mon Sep 17 00:00:00 2001 From: jnfrati Date: Mon, 7 Sep 2026 16:45:29 +0200 Subject: [PATCH] [client] Preserve executable access in rootless image Keep the binary and entrypoint executable when deployments override the runtime group. Retain root ownership so non-root users cannot modify either file. --- client/Dockerfile-rootless | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/client/Dockerfile-rootless b/client/Dockerfile-rootless index e6a381ee0..0169bedc3 100644 --- a/client/Dockerfile-rootless +++ b/client/Dockerfile-rootless @@ -32,5 +32,5 @@ ENV \ ENTRYPOINT [ "/usr/local/bin/netbird-entrypoint.sh" ] ARG TARGETPLATFORM ARG NETBIRD_BINARY=$TARGETPLATFORM/netbird -COPY --chown=0:0 --chmod=0750 client/netbird-entrypoint.sh /usr/local/bin/netbird-entrypoint.sh -COPY --chown=0:0 --chmod=0750 "${NETBIRD_BINARY}" /usr/local/bin/netbird +COPY --chown=0:0 --chmod=0755 client/netbird-entrypoint.sh /usr/local/bin/netbird-entrypoint.sh +COPY --chown=0:0 --chmod=0755 "${NETBIRD_BINARY}" /usr/local/bin/netbird