diff options
| author |   wr148d <wr148d@att.com> | 2020-06-01 14:54:10 -0400 |
|---|---|---|
| committer | wr148d <wr148d@att.com> | 2020-06-01 14:54:37 -0400 |
| commit | 2fe868d3102b65fdc34d74a7ea2f6c41d8eaaeef (patch) | |
| tree | 1543e8cb03e01d411b6a99ab1735fca9373e528c /aai-schema-service/src/main/docker/docker-entrypoint.sh | |
| parent | ecb1ec93c269a6e3fc78c1e44537c3c58cd5411e (diff) | |
Containers should not run as root by default
Issue-ID: AAI-2822
Signed-off-by: wr148d <wr148d@att.com>
Change-Id: Iac6dbfe074db47f05f653e76093296bcf100f79e
Diffstat (limited to 'aai-schema-service/src/main/docker/docker-entrypoint.sh')
| -rw-r--r-- | aai-schema-service/src/main/docker/docker-entrypoint.sh | 29 |
1 files changed, 5 insertions, 24 deletions
diff --git a/aai-schema-service/src/main/docker/docker-entrypoint.sh b/aai-schema-service/src/main/docker/docker-entrypoint.sh index 8129acd..0cb884d 100644 --- a/aai-schema-service/src/main/docker/docker-entrypoint.sh +++ b/aai-schema-service/src/main/docker/docker-entrypoint.sh @@ -23,28 +23,12 @@ RESOURCES_HOME=${APP_HOME}/resources/; export SERVER_PORT=${SERVER_PORT:-8452}; -USER_ID=${LOCAL_USER_ID:-9001} -GROUP_ID=${LOCAL_GROUP_ID:-9001} - -if [ $(cat /etc/passwd | grep aaiadmin | wc -l) -eq 0 ]; then - - groupadd aaiadmin -g ${GROUP_ID} || { - echo "Unable to create the group id for ${GROUP_ID}"; - exit 1; - } - useradd --shell=/bin/bash -u ${USER_ID} -g ${GROUP_ID} -o -c "" -m aaiadmin || { - echo "Unable to create the user id for ${USER_ID}"; - exit 1; - } -fi; - -chown -R aaiadmin:aaiadmin /opt/app /opt/aai/logroot find /opt/app/ -name "*.sh" -exec chmod +x {} + if [ -f ${APP_HOME}/aai.sh ]; then - gosu aaiadmin ln -s bin scripts - gosu aaiadmin ln -s /opt/aai/logroot/AAI-SS logs + ln -s bin scripts + ln -s /opt/aai/logroot/AAI-SS logs mv ${APP_HOME}/aai.sh /etc/profile.d/aai.sh chmod 755 /etc/profile.d/aai.sh @@ -55,7 +39,7 @@ if [ -f ${APP_HOME}/aai.sh ]; then if [ -f ${APP_HOME}/bin/${scriptName} ]; then shift 1; - gosu aaiadmin ${APP_HOME}/bin/${scriptName} "$@" || { + ${APP_HOME}/bin/${scriptName} "$@" || { echo "Failed to run the ${scriptName}"; exit 1; } @@ -71,13 +55,10 @@ if [ -f ${APP_HOME}/aai.sh ]; then echo "Unable to find the updatePem script"; exit 1; else - gosu aaiadmin ${APP_HOME}/scripts/updatePem.sh + ${APP_HOME}/scripts/updatePem.sh fi; fi; -mkdir -p /opt/app/aai-schema-service/logs/gc -chown -R aaiadmin:aaiadmin /opt/app/aai-schema-service/logs/gc - if [ -f ${APP_HOME}/resources/aai-schema-service-swm-vars.sh ]; then source ${APP_HOME}/resources/aai-schema-service-swm-vars.sh; fi; @@ -91,7 +72,7 @@ MIN_HEAP_SIZE=${MIN_HEAP_SIZE:-512m}; MAX_HEAP_SIZE=${MAX_HEAP_SIZE:-1024m}; MAX_METASPACE_SIZE=${MAX_METASPACE_SIZE:-512m}; -JAVA_CMD="exec gosu aaiadmin java"; +JAVA_CMD="exec java"; JVM_OPTS="${PRE_JVM_ARGS} -Xloggc:/opt/app/aai-schema-service/logs/gc/aai_gc.log"; JVM_OPTS="${JVM_OPTS} -XX:HeapDumpPath=/opt/app/aai-schema-service/logs/ajsc-jetty/heap-dump"; |