Dockerfile Cheat Sheet/Run as non-root

Switch the runtime user away from root.

Section: Common Patterns

Run as non-root

dockerfile
dockerfile
RUN addgroup -S app && adduser -S app -G app
USER app
Explanation

A common hardening practice for production images.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Related commands

Same sheet · prioritizing Common Patterns
Use multi-stage build
Build artifacts in one stage and copy only runtime output into the final stage.
OpenIn sheetdockerfilesame section
Add health check
Define a health check command for the container.
OpenIn sheetdockerfilesame section
Cache dependencies effectively
Copy dependency manifests before application code to maximize layer cache reuse.
OpenIn sheetdockerfilesame section
Use .dockerignore
Exclude unnecessary files from build context.
OpenIn sheetgitignoresame section
Copy with ownership
Copy files with explicit ownership.
OpenIn sheetdockerfilesame section
Build from Dockerfile
Build an image from the Dockerfile in the current directory.
OpenIn sheetbash1 tag match