Dev

.github/workflows/publish_image.yaml

@@ -14,7 +14,7 @@ jobs:
         with:
           image: enshrouded-dedicated-server
           context: ./container/wine
-          containerfiles: ./container/wine/Containerfile
+          containerfiles: ./container/wine/Dockerfile
           tags: latest ${{ github.event.release.tag_name }} # Use latest and the release tag
       - name: Push image to Docker Hub
         uses: redhat-actions/push-to-registry@v2

.github/workflows/publish_proton_image.yaml

@@ -12,8 +12,8 @@ jobs:
         with:
           image: enshrouded-dedicated-server
           context: ./container/proton
-          containerfiles: ./container/proton/Containerfile
-          tags: proton-latest
+          containerfiles: ./container/proton/Dockerfile
+          tags: proton-latest 
       - name: Push image to Docker Hub
         uses: redhat-actions/push-to-registry@v2
         with:

container/wine/Containerfile → container/wine/Dockerfile

@@ -28,7 +28,11 @@ RUN groupadd -g $CONTAINER_GID steam \
     && apt-get update \
     && apt-get install -y --install-recommends winehq-stable \
     && wget -O /usr/local/bin/winetricks https://raw.githubusercontent.com/Winetricks/winetricks/master/src/winetricks \
-    && chmod +x /usr/local/bin/winetricks
+    && chmod +x /usr/local/bin/winetricks \
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean \
+    && apt-get autoremove -y 
+
 
 USER steam
 

helm/templates/deployment.yaml

@@ -15,13 +15,17 @@ spec:
     matchLabels:
       app: "{{ .Chart.Name }}"
       release: "{{ .Release.Name }}"
+  securityContext:
+    runAsNonRoot: true
   template:
     metadata:
       labels:
         app: "{{ .Chart.Name }}"
         release: "{{ .Release.Name }}"
     spec:
       securityContext:
+        runAsUser: 10000
+        runAsGroup: 10000
         fsGroup: 10000
       containers:
       - name: "{{ .Chart.Name }}"
@@ -50,6 +54,9 @@ spec:
         volumeMounts:
         - name: data
           mountPath: /home/steam/enshrouded/savegame
+        securityContext:
+          allowPrivilegeEscalation: false
+
       volumes:
       - name: data
         persistentVolumeClaim:

makefile

@@ -1,4 +1,7 @@
-# Image values
+# I would prefer Podman but for some reason the Proton container just doesn't run right in Podman.
+# Not sure if this is a me problem or a Podman problem. So Proton builds and runs with Docker instead.
+#
+# Image Values
 REGISTRY := localhost
 IMAGE := enshrouded-test
 PROTON_IMAGE := enshrouded-proton-test