From bcc32d6305104ecfd054f8223fc4d667319590a5 Mon Sep 17 00:00:00 2001 From: vrvarma Date: Thu, 5 Mar 2020 11:13:48 -0500 Subject: making cmso pods run as non-root user Change-Id: I0cd576964077038790b302d38e48c52da2867546 Signed-off-by: vrvarma Issue-ID: OPTFRA-711 --- cmso-optimizer/src/main/docker/Dockerfile | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'cmso-optimizer/src/main/docker/Dockerfile') diff --git a/cmso-optimizer/src/main/docker/Dockerfile b/cmso-optimizer/src/main/docker/Dockerfile index 76e18c8..b5a5477 100644 --- a/cmso-optimizer/src/main/docker/Dockerfile +++ b/cmso-optimizer/src/main/docker/Dockerfile @@ -30,6 +30,8 @@ RUN test -n "$http_proxy" && echo "Acquire::Proxy \"http://$http_proxy\";" > /et rm mz.tgz && \ echo PATH=/mz-dist:$PATH >> ~/.bashrc +RUN groupadd onap \ + && useradd -m -g onap onap COPY onap-cmso-optimizer/cmso-optimizer.jar ${APP_HOME}/app.jar @@ -44,7 +46,10 @@ COPY onap-cmso-optimizer/scripts ${APP_HOME}/scripts RUN chmod 700 ${APP_HOME}/startService.sh && \ ln -s /share/etc ${APP_HOME}/etc && \ ln -s /share/logs ${APP_HOME}/logs && \ - ln -s /share/debug-logs ${APP_HOME}/debug-logs + ln -s /share/debug-logs ${APP_HOME}/debug-logs && \ + chown -R onap:onap ${APP_HOME} + +USER onap WORKDIR ${APP_HOME} ENTRYPOINT ./startService.sh -- cgit 1.2.3-korg