diff options
| author |   Michael Hwang <mhwang@research.att.com> | 2019-07-16 10:15:37 -0400 |
|---|---|---|
| committer | Michael Hwang <mhwang@research.att.com> | 2019-07-16 10:16:20 -0400 |
| commit | 80a55a40619fc29eb9a0c9f9ba9f110118701b42 (patch) | |
| tree | 499f0f32dc84ebadf19e60965c9b1a07c28f795d | |
| parent | 33d41c6e4e758834c4a61c1511b933b8ace9b10e (diff) | |
Add non-root user to Docker image
Change-Id: Icda4d013f6bd33e7ad1202ac036e599766073acf
Issue-ID: DCAEGEN2-1555
Signed-off-by: Michael Hwang <mhwang@research.att.com>
| -rw-r--r-- | ChangeLog.md | 4 | ||||
| -rw-r--r-- | pom.xml | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/ChangeLog.md b/ChangeLog.md index e657225..a30eb8a 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/). +## [] + +* Add non-root user in Docker image so that the inventory service can be run in non-privileged mode for security reasons DCAEGEN2-1555 + ## [1.1.3] * DCAEGEN2-431 @@ -222,6 +222,10 @@ ECOMP is a trademark and service mark of AT&T Intellectual Property. <imageTag>latest</imageTag> </imageTags> <baseImage>java:8-jre</baseImage> + <user>sch</user> + <runs> + <run>adduser --system --group sch</run> + </runs> <!-- NOTE: Couldn't figure out how to package the jar to be named: ${project.build.finalName}. This might be because of the clojure maven plugin --> <cmd>["java", "-jar", "/opt/servicechange-handler.jar", "prod", "http://consul:8500/v1/kv/service-change-handler?raw=true"]</cmd> |