X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=Dockerfile;h=55d950cf30ea2066b6fbad42a38b54e7ae4f6086;hb=7f6f169ab0d6fbb1f18bc1a8899ab4a5cf60becd;hp=11857b02c6310e022eea262afc2003be6fdfd75e;hpb=4d77dd28a5f7bf64ac88632e7341878ea37b622a;p=externalapi%2Fnbi.git diff --git a/Dockerfile b/Dockerfile index 11857b0..55d950c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,30 +14,19 @@ # limitations under the License. # -FROM openjdk:11-jre-slim +FROM nexus3.onap.org:10001/onap/integration-java11 -ARG SERVER_PORT -ARG PKG_FILENAME=nbi-rest-services-5.0.0.jar -ADD target/$PKG_FILENAME app.jar +USER onap -RUN addgroup appgroup && useradd -ms /bin/bash appuser && adduser appuser appgroup && mkdir temptoscafile && chown appuser:appgroup temptoscafile/ +ARG SERVER_PORT +ARG PKG_FILENAME=nbi-rest-services-8.0.0-SNAPSHOT.jar +ADD target/$PKG_FILENAME /opt/onap/app.jar -COPY src/main/resources/certificate /certs -ARG CERT_PASS=changeit -RUN for cert in $(ls -d /certs/*); do \ - echo "adding $cert to java keystore..."; \ - keytool -import \ - -file "$cert" \ - -storepass "${CERT_PASS}" \ - -keystore $JAVA_HOME/lib/security/cacerts \ - -alias "$(basename $cert)" \ - --noprompt; \ - done +RUN mkdir temptoscafile && chown onap:onap temptoscafile/ -USER appuser:appgroup ENV SERVER_PORT=${SERVER_PORT:-8080} -ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom" +ENV JAVA_OPTS=${JAVA_OPTS:--Djava.security.egd=file:/dev/./urandom} EXPOSE $SERVER_PORT -ENTRYPOINT java -XX:+UseContainerSupport $JAVA_OPTS -jar /app.jar +ENTRYPOINT exec java -XX:+UseContainerSupport $JAVA_OPTS -jar /opt/onap/app.jar