dockerfile: chmod files copied from host to no longer require o=rX perms on host

https://github.com/fphammerle/wireless-sensor-mqtt/commit/885700d508f9462e75f5e103ee7d3bfdaf1bddbe

CHANGELOG.md

@@ -7,6 +7,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 ### Fixed
 - dockerfile: split `pipenv install` into two stages to speed up image builds
+- dockerfile: `chmod` files copied from host to no longer require `o=rX` perms on host
 
 ## [0.5.0] - 2020-11-06
 ### Added

Dockerfile

@@ -41,7 +41,8 @@ COPY --chown=build:nobody . $SOURCE_DIR_PATH
 RUN pipenv install --deploy --verbose \
     && pipenv graph \
     && pipenv run pip freeze \
-    && rm -r .git/ $PIPENV_CACHE_DIR
+    && rm -r .git/ $PIPENV_CACHE_DIR \
+    && chmod -cR a+rX .
 
 # workaround for broken multi-stage copy
 # > failed to copy files: failed to copy directory: Error processing tar file(exit status 1): Container ID ... cannot be mapped to a host ID