ci: fix dockerfile

Signed-off-by: Henry <mail@henrygressmann.de>

Author: explodingcamera

.github/workflows/container.yaml

@@ -51,13 +51,13 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Download liwan binaries
         run: |
-          mkdir -p dist
+          mkdir -p dist/amd64 dist/arm64
 
           curl -fsSL https://github.com/explodingcamera/liwan/releases/download/${{ inputs.tag }}/liwan-x86_64-unknown-linux-musl.tar.gz \
-            | tar -xz -C dist --strip-components=1 &
+            | tar -xz -C dist/amd64 &
 
           curl -fsSL https://github.com/explodingcamera/liwan/releases/download/${{ inputs.tag }}/liwan-aarch64-unknown-linux-musl.tar.gz \
-            | tar -xz -C dist/arm64 --strip-components=1 &
+            | tar -xz -C dist/arm64 &
 
           wait
       - name: Build and push Docker images

scripts/Dockerfile

@@ -1,9 +1,12 @@
 FROM gcr.io/distroless/cc-debian13:nonroot
+ARG TARGETARCH
 
 ENV LIWAN_CONFIG=/liwan.config.toml
 ENV LIWAN_DATA_DIR=/data
 
-COPY --from=buildx /dist/${TARGETARCH:+amd64/}liwan /liwan
+USER 1000:1000
+
+COPY ./dist/${TARGETARCH:+amd64/}liwan /liwan
 
 EXPOSE 9042
 STOPSIGNAL SIGINT