From daf97c53369ea7b1b7b99110baddcb3b6ffe6ead Mon Sep 17 00:00:00 2001
From: Marcel Wysocki <mwysocki@redhat.com>
Date: Wed, 13 Dec 2017 22:00:54 +0100
Subject: [PATCH] use nobody user for the container, minor readme changes

---
 Dockerfile | 8 +++++---
 README.md  | 5 +++--
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 4f0cbd6..ec6b8d6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,12 +5,14 @@ RUN apt update; apt install -y wget; \
   echo 'deb http://apt.llvm.org/xenial/ llvm-toolchain-artful-5.0 main' >> /etc/apt/sources.list ; apt update;\
   apt install -y clang-5.0 lldb-5.0 lld-5.0 libc++-dev git cmake python-pip liblz4-dev; apt clean all
 
+RUN mkdir /build; chown nobody:nogroup /build
+USER nobody
 
-RUN cd ~; git clone https://github.com/reswitched/unicorn.git;\
+RUN cd /build; git clone https://github.com/reswitched/unicorn.git;\
   cd unicorn;\
   UNICORN_ARCHS="aarch64" ./make.sh;\
   ./make.sh install;\  
-  cd ~; git clone https://github.com/reswitched/Mephisto.git; \
+  cd /build; git clone https://github.com/reswitched/Mephisto.git; \
   cd Mephisto;\
   pip install -r requirements.txt;\
   make
@@ -18,5 +20,5 @@ RUN cd ~; git clone https://github.com/reswitched/unicorn.git;\
 EXPOSE 24689
 
 
-ENTRYPOINT ["/root/Mephisto/ctu"]
+ENTRYPOINT ["/build/Mephisto/ctu"]
 CMD ["${*}"] 
diff --git a/README.md b/README.md
index 040c438..96f24c3 100644
--- a/README.md
+++ b/README.md
@@ -78,14 +78,15 @@ docker build -t reswitched/mephisto .
 
 To run Mephisto it needs access to your NSO/NRO files, make sure to bind mount the location into the container.
 
+__Example:__
 ```bash
-docker run -ti --rm -p 24689:24689 -v /home/$USER:/home/$USER reswitched/mephisto --load-nro /$HOME/Coding/libtransistor/build/test/test_helloworld.nro
+docker run -ti --rm -p 24689:24689 -v $HOME:$HOME reswitched/mephisto --load-nro $HOME/Coding/libtransistor/build/test/test_helloworld.nro
 ```
 
 You can also create a bash alias.
 
 ```
-alias ctu='docker run -ti --rm -p 24689:24689 -v /home/$USER:/home/$USER reswitched/mephisto'
+alias ctu='docker run -ti --rm -p 24689:24689 -v $HOME:$HOME reswitched/mephisto'
 ```
 
 Now you can simply run `ctu` with your desired arguments.