From 332582afa439742b62ea23663d19a8208c12177a Mon Sep 17 00:00:00 2001 From: Andrew Kostka Date: Thu, 5 Nov 2026 08:56:11 +0000 Subject: [PATCH 1/2] Update base image to wdqs0.3.165 and run as root --- Dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 2a57373..790114a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,10 @@ -ARG VERSION=0.3.135-wmde.13 +ARG VERSION=wdqs0.3.165 FROM wikibase/wdqs:$VERSION ARG VERSION +# Stopgap as upstream is non-root but our volume is root-owned (see T443565) +USER root + LABEL org.opencontainers.image.source="https://github.com/wbstack/queryservice" ENV USER_AGENT="Wikibase.Cloud Query Service ($VERSION); https://github.com/wbstack/queryservice" From 1c5a8cf7794f079c448d20cbbe44d1d6f2fa95e0 Mon Sep 17 00:00:00 2001 From: Andrew Kostka Date: Thu, 5 Nov 2026 09:32:08 +0000 Subject: [PATCH 2/2] Use numeric UID for root and silence DL3002 --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 790114a..f1f88a7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,8 @@ FROM wikibase/wdqs:$VERSION ARG VERSION # Stopgap as upstream is non-root but our volume is root-owned (see T443565) -USER root +# hadolint ignore=DL3002 +USER 0 LABEL org.opencontainers.image.source="https://github.com/wbstack/queryservice"