diff options
| author |   varun gudisena <varuneshwar.gudisena@att.com> | 2019-02-12 20:18:27 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2019-02-12 20:18:27 +0000 |
| commit | 4e26ea548f5431ba41e7a7ce60c94d7f785b8606 (patch) | |
| tree | ff89fd1dea5b683a4a42139374937593bc0ef99d | |
| parent | a9a7807cfd3bdafdb624ad98ffbf89150713e13b (diff) | |
| parent | 6bd0d04630efa61bff5711395cc7e5c532cba052 (diff) | |
Merge "run container as non root user"3.0.1-ONAP
| -rw-r--r-- | src/main/docker/Dockerfile | 15 |
1 files changed, 7 insertions, 8 deletions
diff --git a/src/main/docker/Dockerfile b/src/main/docker/Dockerfile index 024d075..d08cc51 100644 --- a/src/main/docker/Dockerfile +++ b/src/main/docker/Dockerfile @@ -31,12 +31,11 @@ ADD create-topics.sh /usr/bin/create-topics.sh ADD start-kafkaOrMirrorMaker.sh /usr/bin/start-kafkaOrMirrorMaker.sh ADD start-mirrormaker.sh /usr/bin/start-mirrormaker.sh ADD kafka-run-class.sh ${KAFKA_HOME}/bin/kafka-run-class.sh -# The scripts need to have executable permission -RUN chmod a+x /usr/bin/start-kafka.sh && \ - chmod a+x /usr/bin/broker-list.sh && \ - chmod a+x /usr/bin/start-kafkaOrMirrorMaker.sh && \ - chmod a+x /usr/bin/start-mirrormaker.sh && \ - chmod a+x ${KAFKA_HOME}/bin/kafka-run-class.sh && \ - chmod a+x /usr/bin/create-topics.sh -# Use "exec" form so that it runs as PID 1 (useful for graceful shutdown) + +RUN set -x \ + && useradd kafka \ + && chown -R kafka:kafka /opt/kafka /opt/logs /opt/etc /kafka /tmp/kafka-logs /usr/bin + +USER kafka + CMD ["start-kafkaOrMirrorMaker.sh"] |