From c68f25b4925a2a36e975ac628905e7afd1e289c1 Mon Sep 17 00:00:00 2001
From: Alex Staninger <alex.staninger@gmail.com>
Date: Tue, 18 Jun 2024 12:25:13 -0700
Subject: [PATCH] Fix dockerfile binary permissions (#279)

---
 Dockerfile | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 768953b..f00c54e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,11 +13,26 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# First stage: Use an image that includes shell and utilities
+FROM mcr.microsoft.com/cbl-mariner/base/core:2.0 AS builder
+
+# Set the working directory and copy the 'manager' binary
+WORKDIR /
+COPY bin/manager .
+
+# Set the executable permission on the 'manager' binary
+RUN chmod +x /manager
+
 # Use distroless as minimal base image to package the manager binary
 FROM  mcr.microsoft.com/cbl-mariner/distroless/debug:2.0
 WORKDIR /
 
-COPY bin/manager ./
+# Copy the 'manager' binary from the first stage with the correct permissions
+COPY --from=builder --chown=65532:65532 /manager .
+
+# Set the user ID for the container process to 65532 (nonroot user)
 USER 65532:65532
 
+# Specify the command to run when the container starts
+
 ENTRYPOINT ["/manager"]
\ No newline at end of file