Merge pull request #3965 from jstoja/dockerfile_root_user

Change tiller's Dockerfile to use USER nobody + upgrades to alpine:3.7

rootfs/Dockerfile

@@ -12,15 +12,15 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM alpine:3.3
+FROM alpine:3.7
 
 RUN apk update && apk add ca-certificates && rm -rf /var/cache/apk/*
 
 ENV HOME /tmp
 
-COPY tiller /tiller
+COPY tiller /bin/tiller
 
 EXPOSE 44134
-
-CMD ["/tiller"]
+USER nobody
+ENTRYPOINT ["/bin/tiller"]
 

rootfs/Dockerfile.experimental

@@ -12,15 +12,15 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM alpine:3.3
+FROM alpine:3.7
 
 RUN apk update && apk add ca-certificates && rm -rf /var/cache/apk/*
 
 ENV HOME /tmp
 
-COPY tiller /tiller
+COPY tiller /bin/tiller
 
 EXPOSE 44134
-
-CMD ["/tiller", "--experimental-release"]
+USER nobody
+ENTRYPOINT ["/bin/tiller", "--experimental-release"]