diff options
| author |   rajeevme <rajeev.mehta@amdocs.com> | 2019-10-16 17:18:39 +0530 |
|---|---|---|
| committer | rajeevme <rajeev.mehta@amdocs.com> | 2019-10-16 17:20:27 +0530 |
| commit | 8cd11f35299fbe2b31b46fab1d48e2872f094a09 (patch) | |
| tree | e5c2beb1e362f0ee1f973946c9e742dd38bea0f6 /sparkybe-onap-application/src/main/scripts | |
| parent | 0a22bdc8e4979e1a1493c7f604f75bd0b5ab978e (diff) | |
[AAI-2180] Change aai sparky container processes to run as non-root on the host
Issue-ID: AAI-2180
Change-Id: I3a714101ab782b4c699cccff90dd4ac704eb4213
Signed-off-by: rajeevme<rajeev.mehta@amdocs.com>
Change-Id: I3b34861139db4763da5fe17fb116adddf523b69a
Diffstat (limited to 'sparkybe-onap-application/src/main/scripts')
| -rw-r--r-- | sparkybe-onap-application/src/main/scripts/start.sh | 31 |
1 files changed, 29 insertions, 2 deletions
diff --git a/sparkybe-onap-application/src/main/scripts/start.sh b/sparkybe-onap-application/src/main/scripts/start.sh index 939f476..512d552 100644 --- a/sparkybe-onap-application/src/main/scripts/start.sh +++ b/sparkybe-onap-application/src/main/scripts/start.sh @@ -5,8 +5,35 @@ CONFIG_HOME=${APP_HOME}/config PROPS="-DAPP_HOME=${APP_HOME} -DCONFIG_HOME=${CONFIG_HOME} -Dlogging.config=${CONFIG_HOME}/logging/logback.xml" +# Changes related to:AAI-2180 +# Change aai sparky container processes to run as non-root on the host +USER_ID=${LOCAL_USER_ID:-9001} +GROUP_ID=${LOCAL_GROUP_ID:-9001} +UI_LOGS=/var/log/onap/AAI-UI + +if [ $(cat /etc/passwd | grep aaiadmin | wc -l) -eq 0 ]; then + + groupadd aaiadmin -g ${GROUP_ID} || { + echo "Unable to create the group id for ${GROUP_ID}"; + exit 1; + } + useradd --shell=/bin/bash -u ${USER_ID} -g ${GROUP_ID} -o -c "" -m aaiadmin || { + echo "Unable to create the user id for ${USER_ID}"; + exit 1; + } +fi; +chown -R aaiadmin:aaiadmin ${MICRO_HOME} +chown -R aaiadmin:aaiadmin ${APP_HOME} +chown -R aaiadmin:aaiadmin ${UI_LOGS} +find ${MICRO_HOME} -name "*.sh" -exec chmod +x {} + + +gosu aaiadmin ln -s /logs $MICRO_HOME/logs +JAVA_CMD="exec gosu aaiadmin java"; +JAR_CMD="exec gosu aaiadmin jar"; + +### set -x -jar ufv ${APP_HOME}/lib/sparkybe-onap-application*.jar \ +{JAR_CMD} ufv ${APP_HOME}/lib/sparkybe-onap-application*.jar \ -C ${CONFIG_HOME}/portal/ BOOT-INF/classes/portal.properties \ -C ${CONFIG_HOME}/portal/ BOOT-INF/classes/key.properties > /dev/null 2>&1 @@ -15,4 +42,4 @@ jar ufv ${APP_HOME}/lib/sparkybe-onap-application*.jar \ # cd $APP_HOME -java -Xms1024m -Xmx4096m $PROPS -jar ${APP_HOME}/lib/sparkybe-onap-application*.jar
\ No newline at end of file +${JAVA_CMD} -Xms1024m -Xmx4096m $PROPS -jar ${APP_HOME}/lib/sparkybe-onap-application*.jar |