From ae3a1f1505f3ad18f922a55c14230c07f3faeaeb Mon Sep 17 00:00:00 2001
From: Mia Bennett <mia@chillfox.com>
Date: Wed, 5 Nov 2025 13:10:31 +0930
Subject: [PATCH 1/2] build(Dockerfile): [PPT-2278] add /tmp

---
 Dockerfile | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index a63695c..a47e1f7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -49,6 +49,9 @@ RUN for binary in /app/bin/*; do \
         xargs -I % sh -c 'mkdir -p $(dirname deps%); cp % deps%;'; \
     done
 
+# Create tmp directory with proper permissions
+RUN rm -rf /tmp && mkdir -p /tmp && chmod 1777 /tmp
+
 # Build a minimal docker image
 FROM scratch
 WORKDIR /
@@ -72,6 +75,9 @@ COPY --from=build /usr/share/zoneinfo/ /usr/share/zoneinfo/
 COPY --from=build /app/deps /
 COPY --from=build /app/bin /
 
+# Copy tmp directory
+COPY --from=build /tmp /tmp
+
 # Use an unprivileged user.
 USER appuser:appuser
 

From 37c237525bb9f0d77b5f4f620afb223266ca4241 Mon Sep 17 00:00:00 2001
From: Mia Bennett <mia@chillfox.com>
Date: Thu, 6 Nov 2025 13:34:50 +0930
Subject: [PATCH 2/2] build(Dockerfile): [PPT-2278] set permissions on /tmp

---
 Dockerfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index a47e1f7..48a1e81 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -78,6 +78,13 @@ COPY --from=build /app/bin /
 # Copy tmp directory
 COPY --from=build /tmp /tmp
 
+# chmod for setting permissions on /tmp
+COPY --from=build /bin /bin
+COPY --from=build /lib/ld-musl-* /lib/
+RUN chmod -R a+rwX /tmp
+# hadolint ignore=SC2114,DL3059
+RUN rm -rf /bin /lib
+
 # Use an unprivileged user.
 USER appuser:appuser