aboutsummaryrefslogtreecommitdiffstats
path: root/aai-schema-service/src/main/docker/docker-entrypoint.sh
diff options
context:
space:
mode:
authorwr148d <wr148d@att.com>2020-06-01 14:54:10 -0400
committerwr148d <wr148d@att.com>2020-06-01 14:54:37 -0400
commit2fe868d3102b65fdc34d74a7ea2f6c41d8eaaeef (patch)
tree1543e8cb03e01d411b6a99ab1735fca9373e528c /aai-schema-service/src/main/docker/docker-entrypoint.sh
parentecb1ec93c269a6e3fc78c1e44537c3c58cd5411e (diff)
Containers should not run as root by default
Issue-ID: AAI-2822 Signed-off-by: wr148d <wr148d@att.com> Change-Id: Iac6dbfe074db47f05f653e76093296bcf100f79e
Diffstat (limited to 'aai-schema-service/src/main/docker/docker-entrypoint.sh')
-rw-r--r--aai-schema-service/src/main/docker/docker-entrypoint.sh29
1 files changed, 5 insertions, 24 deletions
diff --git a/aai-schema-service/src/main/docker/docker-entrypoint.sh b/aai-schema-service/src/main/docker/docker-entrypoint.sh
index 8129acd..0cb884d 100644
--- a/aai-schema-service/src/main/docker/docker-entrypoint.sh
+++ b/aai-schema-service/src/main/docker/docker-entrypoint.sh
@@ -23,28 +23,12 @@ RESOURCES_HOME=${APP_HOME}/resources/;
export SERVER_PORT=${SERVER_PORT:-8452};
-USER_ID=${LOCAL_USER_ID:-9001}
-GROUP_ID=${LOCAL_GROUP_ID:-9001}
-
-if [ $(cat /etc/passwd | grep aaiadmin | wc -l) -eq 0 ]; then
-
- groupadd aaiadmin -g ${GROUP_ID} || {
- echo "Unable to create the group id for ${GROUP_ID}";
- exit 1;
- }
- useradd --shell=/bin/bash -u ${USER_ID} -g ${GROUP_ID} -o -c "" -m aaiadmin || {
- echo "Unable to create the user id for ${USER_ID}";
- exit 1;
- }
-fi;
-
-chown -R aaiadmin:aaiadmin /opt/app /opt/aai/logroot
find /opt/app/ -name "*.sh" -exec chmod +x {} +
if [ -f ${APP_HOME}/aai.sh ]; then
- gosu aaiadmin ln -s bin scripts
- gosu aaiadmin ln -s /opt/aai/logroot/AAI-SS logs
+ ln -s bin scripts
+ ln -s /opt/aai/logroot/AAI-SS logs
mv ${APP_HOME}/aai.sh /etc/profile.d/aai.sh
chmod 755 /etc/profile.d/aai.sh
@@ -55,7 +39,7 @@ if [ -f ${APP_HOME}/aai.sh ]; then
if [ -f ${APP_HOME}/bin/${scriptName} ]; then
shift 1;
- gosu aaiadmin ${APP_HOME}/bin/${scriptName} "$@" || {
+ ${APP_HOME}/bin/${scriptName} "$@" || {
echo "Failed to run the ${scriptName}";
exit 1;
}
@@ -71,13 +55,10 @@ if [ -f ${APP_HOME}/aai.sh ]; then
echo "Unable to find the updatePem script";
exit 1;
else
- gosu aaiadmin ${APP_HOME}/scripts/updatePem.sh
+ ${APP_HOME}/scripts/updatePem.sh
fi;
fi;
-mkdir -p /opt/app/aai-schema-service/logs/gc
-chown -R aaiadmin:aaiadmin /opt/app/aai-schema-service/logs/gc
-
if [ -f ${APP_HOME}/resources/aai-schema-service-swm-vars.sh ]; then
source ${APP_HOME}/resources/aai-schema-service-swm-vars.sh;
fi;
@@ -91,7 +72,7 @@ MIN_HEAP_SIZE=${MIN_HEAP_SIZE:-512m};
MAX_HEAP_SIZE=${MAX_HEAP_SIZE:-1024m};
MAX_METASPACE_SIZE=${MAX_METASPACE_SIZE:-512m};
-JAVA_CMD="exec gosu aaiadmin java";
+JAVA_CMD="exec java";
JVM_OPTS="${PRE_JVM_ARGS} -Xloggc:/opt/app/aai-schema-service/logs/gc/aai_gc.log";
JVM_OPTS="${JVM_OPTS} -XX:HeapDumpPath=/opt/app/aai-schema-service/logs/ajsc-jetty/heap-dump";