fix(ownership): change Kong permissions to be kong:root

Author: Tieske

Dockerfile.apk

@@ -30,11 +30,14 @@ RUN set -ex; \
     fi \
     && tar -C / -xzf /tmp/kong.apk.tar.gz \
     && apk add --no-cache libstdc++ libgcc perl tzdata libcap zlib zlib-dev bash \
-    && adduser -S kong \
     && addgroup -S kong \
+    && adduser -S -G kong kong \
     && mkdir -p "${KONG_PREFIX}" \
-    && chown -R kong:0 ${KONG_PREFIX} \
-    && chown kong:0 /usr/local/bin/kong \
+    && chown -R root:kong ${KONG_PREFIX} \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && chmod -R g=u ${KONG_PREFIX} \
     && rm -rf /tmp/kong.apk.tar.gz \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \

Dockerfile.deb

@@ -29,8 +29,12 @@ RUN set -ex; \
     && apt-get install --yes /tmp/kong.deb \
     && rm -rf /var/lib/apt/lists/* \
     && rm -rf /tmp/kong.deb \
-    && chown kong:0 /usr/local/bin/kong \
-    && chown -R kong:0 ${KONG_PREFIX} \
+    && chown root:kong /usr/local/bin/kong \
+    && chown -R root:kong ${KONG_PREFIX} \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \

Dockerfile.rpm

@@ -50,8 +50,13 @@ RUN set -ex; \
     && rpm -iv /tmp/kong.rpm \
     && microdnf -y clean all \
     && rm /tmp/kong.rpm \
-    && chown kong:0 /usr/local/bin/kong \
-    && chown -R kong:0 ${KONG_PREFIX} \
+    && echo "addgroup -S kong" \
+    && echo "adduser -S -G kong kong" \
+    && chown -R root:kong ${KONG_PREFIX} \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \

ubuntu/Dockerfile

@@ -41,8 +41,12 @@ RUN set -ex; \
     && apt install --yes /tmp/kong.deb \
     && rm -rf /var/lib/apt/lists/* \
     && rm -rf /tmp/kong.deb \
-    && chown kong:0 /usr/local/bin/kong \
-    && chown -R kong:0 /usr/local/kong \
+    && adduser --system --disabled-password --ingroup kong --no-create-home kong \
+    && chown -R root:kong /usr/local/kong \
+    && chown -R root:kong /usr/local/lib/lua \
+    && chown -R root:kong /usr/local/lib/luarocks \
+    && chown -R root:kong /usr/local/share/lua \
+    && chown root:kong /usr/local/bin/kong \
     && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
     && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \