run as non root user

[dmaap/messagerouter/messageservice.git] / src / main / resources / docker / Dockerfile

diff --git a/src/main/resources/docker/Dockerfile b/src/main/resources/docker/Dockerfile
index 2639cea..f7efcff 100644 (file)
--- a/src/main/resources/docker/Dockerfile
+++ b/src/main/resources/docker/Dockerfile
@@ -21,7 +21,13 @@
 FROM openjdk:8-alpine
 MAINTAINER DMAAP Team
 COPY appl /appl/
-COPY    startup.sh /
-RUN chmod 700 /startup.sh
+COPY    startup.sh /appl/
+WORKDIR /appl
+RUN chmod 700 startup.sh
 EXPOSE 3904 3905
-ENTRYPOINT ["sh", "./startup.sh"]
+ENTRYPOINT ["sh", "startup.sh"]
+RUN addgroup -S onap \
+    && adduser -S messagerouter -G onap \
+    && chown -R messagerouter:onap /appl/
+
+USER messagerouter
\ No newline at end of file