From 7407611e3e7089e7baeb7061fcdf835957e65717 Mon Sep 17 00:00:00 2001
From: Mikei386 <44135113+Mikei386@users.noreply.github.com>
Date: Mon, 21 Sep 2026 10:51:48 +0200
Subject: [PATCH] Define unprivileged Qwen image runtime user

---
 platform/docker/qwen-image-worker/Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/platform/docker/qwen-image-worker/Dockerfile b/platform/docker/qwen-image-worker/Dockerfile
index b8a0cef..b31a39a 100644
--- a/platform/docker/qwen-image-worker/Dockerfile
+++ b/platform/docker/qwen-image-worker/Dockerfile
@@ -10,6 +10,9 @@ RUN test -n "$COMFYUI_COMMIT" \
     && python -m pip install --break-system-packages --no-cache-dir \
        -r /opt/ComfyUI/requirements.txt \
     && apt-get purge -y --auto-remove git \
+    && groupadd --gid 10002 qwen-image \
+    && useradd --uid 10002 --gid 10002 --no-create-home \
+       --home-dir /nonexistent --shell /usr/sbin/nologin qwen-image \
     && rm -rf /var/lib/apt/lists/* /root/.cache
 
 WORKDIR /opt/ComfyUI