From b3e8898005b82fdc34000df7afdb7d101f88223d Mon Sep 17 00:00:00 2001
From: devthejo <devthejo@protonmail.com>
Date: Fri, 23 Aug 2024 19:30:32 +0200
Subject: [PATCH] fix: add rootless wip

---
 Dockerfile | 8 +++++++-
 README.md  | 2 ++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 38551f1..682f20d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,14 @@
-FROM alpine:latest
+FROM alpine:3.12
+
+RUN addgroup -S -g 1000 sysloggroup && adduser -S -u 1000 -G sysloggroup sysloguser
 
 RUN apk update && apk add --no-cache syslog-ng
 
 EXPOSE 514/tcp 514/udp
 
 COPY syslog-ng.conf /etc/
+
+RUN mkdir -p /run && chown sysloguser:sysloggroup /run && chmod 755 /run
+USER sysloguser
+
 CMD ["/usr/sbin/syslog-ng", "-F", "-f", "/etc/syslog-ng.conf"]
diff --git a/README.md b/README.md
index f27ed3d..02cc5ca 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 # kube-syslog-sidecar
 
+Fork of [Crisu1710/kube-syslog-sidecar](https://github.com/Crisu1710/kube-syslog-sidecar) to provide rootless.
+
 Fork of [whereisaaron/docker-syslog-ng-sidecar](https://github.com/whereisaaron/kube-syslog-sidecar) to provide automated builds and minor tweaks.
 
 Dockerfile for syslog-ng to run in a sidecar container logging to stdout. The purpose of this