diff options
| author |   wr148d <wr148d@att.com> | 2020-06-01 14:54:10 -0400 |
|---|---|---|
| committer | wr148d <wr148d@att.com> | 2020-06-01 14:54:37 -0400 |
| commit | 2fe868d3102b65fdc34d74a7ea2f6c41d8eaaeef (patch) | |
| tree | 1543e8cb03e01d411b6a99ab1735fca9373e528c /aai-schema-service/src/main/docker/Dockerfile | |
| parent | ecb1ec93c269a6e3fc78c1e44537c3c58cd5411e (diff) | |
Containers should not run as root by default
Issue-ID: AAI-2822
Signed-off-by: wr148d <wr148d@att.com>
Change-Id: Iac6dbfe074db47f05f653e76093296bcf100f79e
Diffstat (limited to 'aai-schema-service/src/main/docker/Dockerfile')
| -rw-r--r-- | aai-schema-service/src/main/docker/Dockerfile | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/aai-schema-service/src/main/docker/Dockerfile b/aai-schema-service/src/main/docker/Dockerfile index 6f5efd4..73cdfd7 100644 --- a/aai-schema-service/src/main/docker/Dockerfile +++ b/aai-schema-service/src/main/docker/Dockerfile @@ -1,6 +1,6 @@ FROM @aai.docker.namespace@/aai-common-@aai.base.image@:@aai.base.image.version@ -RUN mkdir -p /opt/aaihome/aaiadmin /opt/aai/logroot/AAI-SCHEMA-SERVICE +RUN mkdir -p /opt/aaihome/aaiadmin /opt/aai/logroot/AAI-SCHEMA-SERVICE /opt/app/aai-schema-service/logs/gc VOLUME /opt/aai/logroot/AAI-SS VOLUME /tmp @@ -8,9 +8,18 @@ VOLUME /opt/tools HEALTHCHECK --interval=40s --timeout=10s --retries=3 CMD nc -z -v localhost 8452 || exit 1 +RUN groupadd aaiadmin -g 1000 + +RUN adduser -u 1000 -h /opt/aaihome/aaiadmin -S -D -G aaiadmin -s /bin/bash aaiadmin + # Add the proper files into the docker image from your build WORKDIR /opt/app/aai-schema-service -COPY /maven/aai-schema-service/ . + +RUN chown -R aaiadmin:aaiadmin /opt/app/aai-schema-service /etc/profile.d /opt/aai/logroot/AAI-SS /opt/app /opt/aai/logroot /opt/app/aai-schema-service/logs/gc + +COPY --chown=aaiadmin:aaiadmin /maven/aai-schema-service/ . + +USER aaiadmin ENV AAI_BUILD_VERSION @aai.docker.version@ # Expose the ports for outside linux to use |