Hotfix 0.1.1

[Harsche]

Summary by CodeRabbit

• Chores
  • Updated the container runtime to ensure the application directory is owned by the correct user before startup, helping avoid permission-related issues in deployed environments.

[coderabbitai]

📝 Walkthrough

Walkthrough

The Dockerfile's final build stage adds a single RUN instruction that recursively changes ownership of the /app directory to $APP_UID:$APP_UID, placed before the existing USER and ENTRYPOINT instructions.

Changes

Docker image ownership

Layer / File(s)	Summary
Add chown step for /app directory Dockerfile	A RUN step recursively changes ownership of /app to $APP_UID:$APP_UID before switching to the non-root user via USER $APP_UID.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Related PRs: None found

Suggested labels: docker, build

Suggested reviewers: None found

🐰 A single line to set things right,
Ownership passed with root's last light,
The app now runs, secure and neat,
Chown before the final feat!

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title is related to a maintenance change, but it is too generic to convey the actual Dockerfile update.	Rename it to describe the change, e.g. "Fix Dockerfile ownership for /app in final stage".

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch hotfix/0.1.1

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

Dockerfile (1)

14-14: 🚀 Performance & Scalability | 🔵 Trivial | ⚡ Quick win

Prefer COPY --chown over RUN chown -R to avoid layer bloat.

The fix is functionally correct — $APP_UID is set by the aspnet base image, so ownership resolves as intended before USER $APP_UID. However, RUN chown -R on a directory already populated by a prior COPY layer causes the overlay filesystem to duplicate every file into a new layer, inflating the final image size (this is a well-documented Docker chown/COW pitfall). Setting ownership at copy time avoids the extra layer entirely.

♻️ Proposed refactor

 WORKDIR /app
-COPY --from=build /app/publish .
-RUN chown -R $APP_UID:$APP_UID /app
+COPY --chown=$APP_UID:$APP_UID --from=build /app/publish .
 USER $APP_UID

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@Dockerfile` at line 14, The Dockerfile currently uses a separate
ownership-changing step after copying files into /app, which causes unnecessary
layer bloat. Update the image build flow to set ownership at copy time by using
the COPY instruction with chown for the app contents, and remove the standalone
RUN chown -R step. Keep the existing APP_UID and USER $APP_UID flow intact, and
apply the change in the Dockerfile where the /app files are copied.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@Dockerfile`:
- Line 14: The Dockerfile currently uses a separate ownership-changing step
after copying files into /app, which causes unnecessary layer bloat. Update the
image build flow to set ownership at copy time by using the COPY instruction
with chown for the app contents, and remove the standalone RUN chown -R step.
Keep the existing APP_UID and USER $APP_UID flow intact, and apply the change in
the Dockerfile where the /app files are copied.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3e3f8d6a-eb37-4978-8ff2-764175da3bf4

📥 Commits

Reviewing files that changed from the base of the PR and between 67fdcc9 and dcc4962.

📒 Files selected for processing (1)

• Dockerfile