summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Hwang <mhwang@research.att.com>2019-07-16 10:15:37 -0400
committerMichael Hwang <mhwang@research.att.com>2019-07-16 10:16:20 -0400
commit80a55a40619fc29eb9a0c9f9ba9f110118701b42 (patch)
tree499f0f32dc84ebadf19e60965c9b1a07c28f795d
parent33d41c6e4e758834c4a61c1511b933b8ace9b10e (diff)
Add non-root user to Docker image
Change-Id: Icda4d013f6bd33e7ad1202ac036e599766073acf Issue-ID: DCAEGEN2-1555 Signed-off-by: Michael Hwang <mhwang@research.att.com>
-rw-r--r--ChangeLog.md4
-rw-r--r--pom.xml4
2 files changed, 8 insertions, 0 deletions
diff --git a/ChangeLog.md b/ChangeLog.md
index e657225..a30eb8a 100644
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](http://keepachangelog.com/)
and this project adheres to [Semantic Versioning](http://semver.org/).
+## []
+
+* Add non-root user in Docker image so that the inventory service can be run in non-privileged mode for security reasons DCAEGEN2-1555
+
## [1.1.3]
* DCAEGEN2-431
diff --git a/pom.xml b/pom.xml
index bc6c00a..ab0a2e3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -222,6 +222,10 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property.
<imageTag>latest</imageTag>
</imageTags>
<baseImage>java:8-jre</baseImage>
+ <user>sch</user>
+ <runs>
+ <run>adduser --system --group sch</run>
+ </runs>
<!-- NOTE: Couldn't figure out how to package the jar to be named: ${project.build.finalName}. This might be
because of the clojure maven plugin -->
<cmd>["java", "-jar", "/opt/servicechange-handler.jar", "prod", "http://consul:8500/v1/kv/service-change-handler?raw=true"]</cmd>