blob: 54e8c1a9b887d33cf30688505bcbb929fea0a803 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
# Prepare stage for multistage image build
## START OF STAGE0 ##
FROM @base.image.name@:@base.image.version@ AS stage0
ENV LOG_PATH /var/log/onap/sdnc
ENV SDNC_CONFIG_DIR /opt/sdnc/gra/config
ENV TRUSTSTORE @truststore.file@
ENV JAVA_SECURITY_DIR /opt/java/openjdk/lib/security
USER root
# copy deliverables to opt
COPY opt /opt
# Install certificates
RUN keytool -importkeystore -srckeystore ${SDNC_CONFIG_DIR}/${TRUSTSTORE} -srcstorepass changeit -destkeystore ${JAVA_SECURITY_DIR}/cacerts -deststorepass changeit -noprompt
## END OF STAGE0 ##
FROM @base.image.name@:@base.image.version@
MAINTAINER SDNC Team (onap-sdnc@lists.onap.org)
ENV PROJECT_VERSION @project.version@
ENV SDNC_HOME /opt/sdnc/gra
ENV SDNC_CONFIG_DIR /opt/sdnc/gra/config
ENV GRA_JAR @sdnc.gra.jar@
ENV SDNC_UID @sdnc.uid@
ENV SVCLOGIC_PROPERTIES /opt/sdnc/gra/config/svclogic.properties
ENV SVCLOGIC_DIR /opt/sdnc/gra/service-logic/graphs
ENV LOG_PATH /var/log/onap/sdnc
USER root
# Install sudo, IP utilities and openjdk 11
RUN export http_proxy=http://sub.proxy.att.com:8080 \
&& export https_proxy=http://sub.proxy.att.com:8080 \
&& apk update && apk --no-cache add bash curl mysql-client sudo iputils openssl \
&& unset http_proxy \
&& unset https_proxy
# Enable wheel group
RUN sed -e 's/# %wheel ALL=(ALL) NOPASSWD: ALL/%wheel ALL=(ALL) NOPASSWD: ALL/g' -i /etc/sudoers
# Create sdnc user
RUN addgroup -g ${SDNC_UID} -S sdnc && adduser -u ${SDNC_UID} -G sdnc -S sdnc
RUN addgroup sdnc wheel
COPY --from=stage0 --chown=sdnc:sdnc /opt /opt
RUN mkdir -p ${LOG_PATH} && chown sdnc:sdnc ${LOG_PATH}
RUN chmod +x ${SDNC_HOME}/bin/*.sh
USER sdnc
WORKDIR ${SDNC_HOME}
ENTRYPOINT /opt/sdnc/gra/bin/startGra.sh
EXPOSE 8443 8080
|
