From 6aa307c93bb05223f8b0c797b6425041a298955e Mon Sep 17 00:00:00 2001 From: Huabing Zhao Date: Wed, 10 Apr 2019 09:09:19 +0000 Subject: Run discovery as non-root user Change-Id: I97ef4a92f991cd6d72a38b293ec14620050cad9e Issue-ID: MSB-321 Signed-off-by: Huabing Zhao --- distributions/msb-discovery/src/main/docker/Dockerfile | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) (limited to 'distributions/msb-discovery/src/main/docker/Dockerfile') diff --git a/distributions/msb-discovery/src/main/docker/Dockerfile b/distributions/msb-discovery/src/main/docker/Dockerfile index 747790f..2058233 100644 --- a/distributions/msb-discovery/src/main/docker/Dockerfile +++ b/distributions/msb-discovery/src/main/docker/Dockerfile @@ -5,6 +5,14 @@ COPY msb-discover*.tar.gz /usr/src RUN tar -xzf /usr/src/msb-discover*.tar.gz -C /usr/local --strip-components=1; \ rm /usr/src/msb-discover*.tar.gz +RUN apk add --no-cache shadow sudo && \ + addgroup -g 1000 msb && \ + adduser -D -u 1000 -G msb msb && \ + echo "msb ALL=(root) NOPASSWD:ALL" > /etc/sudoers.d/msb && \ + chmod 0440 /etc/sudoers.d/msb && \ + chown -R msb:msb /usr/local +USER msb + WORKDIR /usr/local EXPOSE 10081 -ENTRYPOINT exec $PWD/startup4docker.sh \ No newline at end of file +ENTRYPOINT exec $PWD/startup4docker.sh -- cgit 1.2.3-korg