From 958f0b0896f0ee9e5876ef885bf2125dd4c2ad53 Mon Sep 17 00:00:00 2001 From: RehanRaza Date: Fri, 22 Feb 2019 10:04:34 +0000 Subject: Run DFC docker container as a non-root user Change-Id: I82504ebebc8ddf48f6ee6b1c1dfbe433c60ab1aa Issue-ID: DCAEGEN2-1269 Signed-off-by: RehanRaza --- datafile-app-server/src/main/resources/Dockerfile | 42 +++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 datafile-app-server/src/main/resources/Dockerfile (limited to 'datafile-app-server/src/main/resources/Dockerfile') diff --git a/datafile-app-server/src/main/resources/Dockerfile b/datafile-app-server/src/main/resources/Dockerfile new file mode 100644 index 00000000..1869d364 --- /dev/null +++ b/datafile-app-server/src/main/resources/Dockerfile @@ -0,0 +1,42 @@ +# +# ============LICENSE_START======================================================= +# Copyright (C) 2019 Nordix Foundation. +# ================================================================================ +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# ============LICENSE_END========================================================= +# +FROM openjdk:8-jre-alpine + +WORKDIR /opt/app/datafile +RUN mkdir -p /var/log/ONAP + +ARG JAR_FILE +ADD /target/${JAR_FILE} /opt/app/datafile/datafile-app-server.jar + +ADD /config/application.yaml /opt/app/datafile/config/ +ADD /config/cacerts /opt/app/datafile/config/ +ADD /config/datafile_endpoints.json /opt/app/datafile/config/ +ADD /config/ftpKey.jks /opt/app/datafile/config/ +ADD /config/keystore /opt/app/datafile/config/ + +EXPOSE 8100 8433 + +RUN addgroup -S onap && adduser -S datafile -G onap +RUN chown -R datafile:onap /opt/app/datafile +RUN chown -R datafile:onap /var/log/ONAP + +USER datafile + +ENTRYPOINT ["/usr/bin/java", "-jar", "/opt/app/datafile/datafile-app-server.jar"] \ No newline at end of file -- cgit 1.2.3-korg