Add gosu to the containers

- allows Vaultwarden to run as a different user after finishing up preliminary operations in the script(s)

docker/DockerSettings.yaml

@@ -5,6 +5,9 @@ vault_image_digest: "sha256:cb6b2095a4afc1d9d243a33f6d09211f40e3d82c7ae829fd025d
 # We use the linux/amd64 platform shell scripts since there is no difference between the different platform scripts
 # https://github.com/tonistiigi/xx | https://hub.docker.com/r/tonistiigi/xx/tags
 xx_image_digest: "sha256:9c207bead753dda9430bdd15425c6518fc7a03d866103c516a2c6889188f5894"
+# Gosu v1.17
+# https://github.com/tianon/gosu | https://hub.docker.com/r/tianon/gosu/tags
+gosu_image_digest: "sha256:68fc2ba73659a940fdadd7c66796ba4a6ff0d0ec7e96a568db191d0f99256a77"
 rust_version: 1.84.1 # Rust version to be used
 debian_version: bookworm # Debian release name to be used
 alpine_version: "3.21" # Alpine version to be used

docker/Dockerfile.alpine

@@ -156,6 +156,7 @@ WORKDIR /
 
 COPY docker/healthcheck.sh docker/start.sh /
 
+COPY --from=tianon/gosu@sha256:68fc2ba73659a940fdadd7c66796ba4a6ff0d0ec7e96a568db191d0f99256a77 /gosu /usr/local/bin/
 COPY --from=vault /web-vault ./web-vault
 COPY --from=build /app/target/final/vaultwarden .
 

docker/Dockerfile.debian

@@ -198,6 +198,7 @@ WORKDIR /
 
 COPY docker/healthcheck.sh docker/start.sh /
 
+COPY --from=tianon/gosu@sha256:68fc2ba73659a940fdadd7c66796ba4a6ff0d0ec7e96a568db191d0f99256a77 /gosu /usr/local/bin/
 COPY --from=vault /web-vault ./web-vault
 COPY --from=build /app/target/final/vaultwarden .
 

docker/Dockerfile.j2

@@ -242,6 +242,7 @@ WORKDIR /
 
 COPY docker/healthcheck.sh docker/start.sh /
 
+COPY --from=tianon/gosu@{{ gosu_image_digest }} /gosu /usr/local/bin/
 COPY --from=vault /web-vault ./web-vault
 COPY --from=build /app/target/final/vaultwarden .