summaryrefslogtreecommitdiffstats
path: root/tca-cdap-container/Dockerfile
diff options
context:
space:
mode:
Diffstat (limited to 'tca-cdap-container/Dockerfile')
-rw-r--r--tca-cdap-container/Dockerfile6
1 files changed, 6 insertions, 0 deletions
diff --git a/tca-cdap-container/Dockerfile b/tca-cdap-container/Dockerfile
index 2c57ff2..e7ae748 100644
--- a/tca-cdap-container/Dockerfile
+++ b/tca-cdap-container/Dockerfile
@@ -16,6 +16,11 @@
FROM caskdata/cdap-standalone:4.1.2
+ARG USER_GROUP=tca-cdap-group
+ARG NON_ROOT_USER=tca-cdap
+
+#Add a new user and group to allow container to be run as non-root
+RUN addgroup --system ${USER_GROUP} && adduser --system ${NON_ROOT_USER} --ingroup ${USER_GROUP}
RUN apt-get update && apt-get install -y netcat jq iputils-ping wget vim curl
COPY get-tca.sh /opt/tca/get-tca.sh
RUN /opt/tca/get-tca.sh
@@ -33,4 +38,5 @@ RUN chmod 755 /opt/tca/mr-watchdog.sh
EXPOSE 11011
EXPOSE 11015
+USER ${NON_ROOT_USER}:${USER_GROUP}
ENTRYPOINT /opt/tca/restart.sh