summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorsunil.unnava <sunil.unnava@att.com>2019-04-08 19:31:14 -0400
committersunil.unnava <sunil.unnava@att.com>2019-04-08 19:31:39 -0400
commitc2b8550855c68fb8ee6398c358a3e00399359942 (patch)
treeec42e18b216d0c5087d8d6da2093acc1e7bd1442
parente37b88533e88eec27adf74851fe8d745dc21e726 (diff)
run as non root user
Issue-ID: DMAAP-1040 Change-Id: I3966b02e33b589c766a688100b8ec33b40a01187 Signed-off-by: sunil.unnava <sunil.unnava@att.com>
-rw-r--r--src/main/docker/Dockerfile11
1 files changed, 8 insertions, 3 deletions
diff --git a/src/main/docker/Dockerfile b/src/main/docker/Dockerfile
index 3e0652e..f21b236 100644
--- a/src/main/docker/Dockerfile
+++ b/src/main/docker/Dockerfile
@@ -1,7 +1,6 @@
FROM ubuntu:16.04
-ENV ZK_USER=root \
- ZK_DATA_DIR=/var/lib/zookeeper/data \
+ENV ZK_DATA_DIR=/var/lib/zookeeper/data \
ZK_LOG_DIR=/var/log/zookeeper \
JAVA_HOME=/usr/lib/jvm/java-8-openjdk-amd64
@@ -43,7 +42,6 @@ COPY scripts /opt/zookeeper/bin/
# for necessary directories and symlink the distribution as a user executable
RUN set -x \
&& mkdir -p $ZK_DATA_DIR $ZK_LOG_DIR /usr/share/zookeeper /tmp/zookeeper /usr/etc/ \
- && chown -R "$ZK_USER:$ZK_USER" /opt/$ZK_DIST $ZK_DATA_DIR $ZK_LOG_DIR /tmp/zookeeper \
&& ln -s /opt/zookeeper/conf/ /usr/etc/zookeeper \
&& ln -s /opt/zookeeper/bin/* /usr/bin \
&& ln -s /opt/zookeeper/$ZK_DIST.jar /usr/share/zookeeper/ \
@@ -52,3 +50,10 @@ RUN set -x \
RUN chmod -R 777 /opt/zookeeper/bin
ENTRYPOINT /opt/zookeeper/bin/start-zookeeper.sh
EXPOSE 2181 2888 3888
+
+RUN addgroup onap \
+ && adduser mrzookeeper -ingroup onap \
+ && chown -R mrzookeeper:onap /opt/$ZK_DIST/ /opt/zookeeper/ /var/lib/ /var/log/ /tmp/zookeeper/
+
+USER mrzookeeper
+