fix dir permission override

apps/pdf-converter/docker/Dockerfile

@@ -62,20 +62,24 @@ ENV LANG="ja_JP.UTF-8"
 ENV optDir="/opt"
 ENV appDir="${optDir}/pdf-converter"
 
-RUN apt-get update && apt-get install -y chromium fonts-lato fonts-ipafont-gothic fonts-noto-cjk \
+RUN apt-get update && apt-get install -y chromium fonts-lato fonts-ipafont-gothic fonts-noto-cjk gosu \
     && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*;
+    && rm -rf /var/lib/apt/lists/*; \
+# verify that the binary works
+    gosu nobody true
 
 # copy artifacts
 COPY --from=builder --chown=node:node \
   ${optDir}/packages.tar.gz ${appDir}/
 
+# extract artifacts as 'node' user
 USER node
 WORKDIR ${appDir}
 RUN tar -xf packages.tar.gz && rm packages.tar.gz
 
 COPY --chown=node:node --chmod=700 apps/pdf-converter/docker/docker-entrypoint.sh /
 
+USER root
 WORKDIR ${appDir}/apps/pdf-converter
 
 EXPOSE 3010

apps/pdf-converter/docker/docker-entrypoint.sh

@@ -7,4 +7,4 @@ mkdir -p /tmp/page-bulk-export
 chown -R node:node /tmp/page-bulk-export
 chmod 700 /tmp/page-bulk-export
 
-node dist/index.js
+exec gosu node node dist/index.js