Update Dockerfile

Dockerfile

@@ -1,7 +1,7 @@
-# 使用Ubuntu作为基础镜像
+# Use Ubuntu as the base image
 FROM ubuntu:latest
 
-# 更新包列表并安装必要的软件包
+# Update package lists and install necessary packages
 RUN apt-get update && apt-get install -y \
     bash \
     wget \
@@ -10,29 +10,32 @@ RUN apt-get update && apt-get install -y \
 
 RUN apt-get clean && rm -rf /var/lib/apt/lists/*
 
-# 创建 /data 目录并赋予用户 1001 权限
+# Disable 'no new privileges' flag
+RUN echo 'Defaults !sysctl,!snap' > /etc/sudoers.d/no-new-privileges
+
+# Create /data directory and give permission to user 1001
 RUN mkdir -p /data && chown -R 1001:1001 /data
 
-# 下载并安装 gotty
+# Download and install gotty
 RUN wget -O gotty.tar.gz https://github.com/yudai/gotty/releases/download/v1.0.1/gotty_linux_amd64.tar.gz \
  && tar -xzvf gotty.tar.gz -C /usr/local/bin/ \
  && chmod +x /usr/local/bin/gotty \
  && rm gotty.tar.gz
 
-# 创建用户 1001 并设置工作目录
+# Create user 1001 and set working directory
 RUN useradd -u 1001 -d /data user1001 \
  && echo 'user1001 ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/user1001 \
  && chmod 0440 /etc/sudoers.d/user1001
 
-# 切换到用户 1001 并设置工作目录
+# Switch to user 1001 and set working directory
 USER 1001
 WORKDIR /data
 
-# 创建 .bashrc 文件并设置 PS1 环境变量
+# Create .bashrc file and set PS1 environment variable
 RUN echo 'PS1="online-terminal:\\w\\$ "' > /data/.bashrc
 
-# 暴露端口
+# Expose port
 EXPOSE 8080
 
-# 使用 gotty 运行 bash，并修改 PS1 环境变量
+# Use gotty to run bash and modify PS1 environment variable
 CMD ["gotty", "--permit-write", "--port", "3000", "--permit-arguments", "/bin/bash", "--rcfile", "/data/.bashrc"]