summaryrefslogtreecommitdiffstats
path: root/Dockerfile-template
diff options
context:
space:
mode:
authorJack Lucas <jflucas@research.att.com>2020-03-04 11:06:57 -0500
committerJack Lucas <jflucas@research.att.com>2020-03-05 12:57:04 -0500
commit879dbd69fd7801798d8e2e2662de1758accb9105 (patch)
treed50c24e3b63688f960c0ac21c3209f3310ec73b2 /Dockerfile-template
parent483be066adba0b4bb0f7214bc9f89ee41076a3c3 (diff)
Run bootstrap container as non-root user1.12.0
Issue-ID: DCAEGEN2-2072 Signed-off-by: Jack Lucas <jflucas@research.att.com> Change-Id: I2555fdd6d1606d9f05a8711cf1fdacd43a9a1e35
Diffstat (limited to 'Dockerfile-template')
-rw-r--r--Dockerfile-template9
1 files changed, 9 insertions, 0 deletions
diff --git a/Dockerfile-template b/Dockerfile-template
index 8c2e084..54609ca 100644
--- a/Dockerfile-template
+++ b/Dockerfile-template
@@ -61,3 +61,12 @@ COPY blueprints/ /blueprints
# Set up runtime script
ENTRYPOINT exec "/scripts/bootstrap.sh"
+
+# Set up a non-root user
+RUN mkdir -p /opt/bootstrap \
+ && useradd -d /opt/bootstrap bootstrap \
+ && chown -R bootstrap:bootstrap /opt/bootstrap \
+ && chown -R bootstrap:bootstrap /scripts \
+ && chown -R bootstrap:bootstrap /blueprints \
+ && chown -R bootstrap:bootstrap /opt/consul
+USER bootstrap