2026-09-13 09:17:11 +00:00
1 changed files with 4 additions and 5 deletions
@@ -24,11 +24,10 @@ RUN node /app/node_modules/typescript/bin/tsc client.ts index.ts provisioner/ind
 FROM ${RUNTIME_BASE}
 # **This module talks to its database through psql, so psql has to be here.** The client is how
 # postgres's provisioner runs DDL — it does not carry a driver — and the runtime base holds only
-# what every module needs. Root to install it, then back to the base's unprivileged user: a
-# provisioner holding the superuser password has no business also being root in its container.
-USER root
-RUN apk add --no-cache postgresql-client
-USER node
+# what every module needs.
+RUN apt-get update \
+      && apt-get install -y --no-install-recommends postgresql-client \
+      && rm -rf /var/lib/apt/lists/*
 COPY --from=build /app/modules/postgres/dist /app/modules/postgres/dist
 # What a tool host should load from this module: its event consumer and its tools, which are
 # separate entrypoints because they are loaded by different things. The provisioner is the third,