Update Dockerfile and Makefile (#2)

.dockerignore

+.dockerignore
+.DS_Store
+.git
+.gitignore
+.github
+.idea
+.vscode
+dist
+Dockerfile
+*.yaml
+*.yml
+*.md

Dockerfile

-FROM golang AS builder
-ADD . /src
+FROM golang:1.13 AS build
+
+ARG COMMIT=""
+
 WORKDIR /src
-RUN make binary
-
-FROM debian
-RUN apt update && apt install -y \
-        ca-certificates \
-    && rm -rf /var/lib/apt/lists/*
-COPY --from=builder /src/dist/bee /usr/local/bin/bee
-RUN chmod +x /usr/local/bin/bee
+COPY . ./
+
+RUN make binary COMMIT=$COMMIT
+
+FROM debian:10.2-slim
+
+ENV DEBIAN_FRONTEND noninteractive
+
+RUN apt-get update && apt-get install -y \
+        ca-certificates && \
+    apt-get clean && rm -rf /var/lib/apt/lists/* && \
+    groupadd -r drone && \
+    useradd --no-log-init -r -g drone drone
+
+COPY --from=build /src/dist/bee /usr/local/bin/bee
+
+USER drone
+
 ENTRYPOINT ["bee"]

Makefile

+COMMIT ?= ""
+
 GO ?= go
 GOLANGCI_LINT ?= golangci-lint
 
-LDFLAGS ?= -s -w -X github.com/janos/bee.commit="$(shell git describe --long --dirty --always --match "" || true)"
+LDFLAGS ?= -s -w -X github.com/janos/bee.commit="$(COMMIT)"
 
 .PHONY: all
 all: lint vet test binary
@@ -32,4 +34,9 @@ build: export CGO_ENABLED=0
 build:
 	$(GO) build -trimpath -ldflags "$(LDFLAGS)" ./...
 
+.PHONY: clean
+clean:
+	$(GO) clean
+	rm -rf dist/
+
 FORCE: