An improved dotnet Api Dockerfile

FROM mcr.microsoft.com/dotnet/aspnet:7.0 AS base
WORKDIR /app
EXPOSE 80

FROM mcr.microsoft.com/dotnet/sdk:7.0 AS build
WORKDIR /src
COPY ["WebApi/WebApi.csproj", "WebApi/"]
RUN dotnet restore "WebApi/WebApi.csproj"
COPY . .
WORKDIR "/src/WebApi"
RUN dotnet build "WebApi.csproj" -c Release -o /app/build

FROM build AS publish
RUN dotnet publish "WebApi.csproj" -c Release -o /app/publish /p:UseAppHost=false

FROM base AS final

# Upgrade debian packages
RUN apt update && apt dist-upgrade -y
# Add non-root user
RUN adduser --disabled-password --home /app --gecos '' dotnetuser && chown -R dotnetuser /app
WORKDIR /app

# From here every command runs as non-root user
# including running your WebApi
USER dotnetuser

COPY --from=publish /app/publish .
ENTRYPOINT ["dotnet", "WebApi.dll"]