Configure unprivileged cirunner, install sudo

[scripts.git] / docker / jessie / Dockerfile

diff --git a/docker/jessie/Dockerfile b/docker/jessie/Dockerfile
index e8c321a..cffffd5 100644 (file)
--- a/docker/jessie/Dockerfile
+++ b/docker/jessie/Dockerfile
@@ -8,8 +8,14 @@ RUN apt-get update \
   && apt-get install -y --no-install-recommends \
     git \
     locales \
+    sudo \
   && apt-get clean \
   && rm -rf /var/lib/apt/lists/*
 
 RUN localedef -i en_US -c -f UTF-8 -A /usr/share/locale/locale.alias en_US.UTF-8
 ENV LANG en_US.utf8
+
+RUN useradd -ms /bin/bash -G sudo cirunner
+
+# allow all members of sudo group to execute any command without password
+RUN sed -i 's/^%sudo.*/%sudo ALL=(ALL) NOPASSWD:ALL/' /etc/sudoers