diff options
| author |   Filip Krzywka <filip.krzywka@nokia.com> | 2019-06-06 11:24:36 +0200 |
|---|---|---|
| committer | Filip Krzywka <filip.krzywka@nokia.com> | 2019-06-07 07:46:47 +0200 |
| commit | 1c9ec6db2d7296131b2baf4433bdeb0f228775db (patch) | |
| tree | a85adc91384dcdbd12d86263b138a3949e09b920 /sources | |
| parent | c295544aa9e6cabb7ef63799cb5c98c599239a3a (diff) | |
Run container commands as non-root
- 1410 uig/gid is arbitrary, note however that any volume mounted into
container should limit permissions to this number
- also reduced firstRequestDelay in configuration provided through
local docker-compose
Change-Id: I77eeebeec5931db5c04f8f6f24d7c6fe7a121015
Issue-ID: DCAEGEN2-1557
Signed-off-by: Filip Krzywka <filip.krzywka@nokia.com>
Diffstat (limited to 'sources')
| -rw-r--r-- | sources/hv-collector-main/Dockerfile | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/sources/hv-collector-main/Dockerfile b/sources/hv-collector-main/Dockerfile index cfd4a7bb..36ada936 100644 --- a/sources/hv-collector-main/Dockerfile +++ b/sources/hv-collector-main/Dockerfile @@ -5,12 +5,19 @@ LABEL license.name="The Apache Software License, Version 2.0" LABEL license.url="http://www.apache.org/licenses/LICENSE-2.0" LABEL maintainer="Nokia Wroclaw ONAP Team" +ARG HV_VES_USER=hvves +ARG HV_VES_USER_ID_NUMBER=1410 + RUN apt-get update \ && apt-get install -y --no-install-recommends curl netcat \ && apt-get clean WORKDIR /opt/ves-hv-collector +RUN useradd --user-group --uid ${HV_VES_USER_ID_NUMBER} ${HV_VES_USER} + +USER ${HV_VES_USER} + ENTRYPOINT ["./entry.sh"] CMD ["--configuration-file /etc/ves-hv/configuration/base.json"] |