summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHarish Venkata Kajur <vk250x@att.com>2020-07-15 12:07:57 -0400
committerHarish Venkata Kajur <vk250x@att.com>2020-07-15 12:08:07 -0400
commita1f2a07763cda156c149624b09c48ff85aa0d4a7 (patch)
tree96838bdad45b11b1ffcc431ef4661ba823fca7e3
parent0a57f838fced472afde62cb7ef25784d3e9bd0b3 (diff)
Ensure Non-root user for haproxy
Issue-ID: AAI-2822 Change-Id: Ic5ea276e4f344ef9e2c321069ba8b4ffeb38312f Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
-rw-r--r--aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile6
1 files changed, 5 insertions, 1 deletions
diff --git a/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile b/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile
index 7bf9b20a..a96c3640 100644
--- a/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile
+++ b/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile
@@ -9,7 +9,11 @@ ENV https_proxy ""
RUN apk add --no-cache \
ca-certificates \
curl \
- openssl
+ openssl \
+ shadow \
+ util-linux && \
+ groupadd haproxy -g 1000 && \
+ adduser -u 1000 -S -D -G haproxy -s /bin/bash haproxy
RUN mkdir -p /etc/ssl/certs/ && mkdir -p /etc/ssl/private