X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=Dockerfile;h=d7d597b63e1b709453c89f90def1dfc38e7b0837;hb=HEAD;hp=11857b02c6310e022eea262afc2003be6fdfd75e;hpb=98c392025b759d2ccc11f0d564331af4b5290ae4;p=externalapi%2Fnbi.git diff --git a/Dockerfile b/Dockerfile index 11857b0..d7d597b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,30 +14,19 @@ # limitations under the License. # -FROM openjdk:11-jre-slim +FROM nexus3.onap.org:10001/onap/integration-java11 -ARG SERVER_PORT -ARG PKG_FILENAME=nbi-rest-services-5.0.0.jar -ADD target/$PKG_FILENAME app.jar +USER onap -RUN addgroup appgroup && useradd -ms /bin/bash appuser && adduser appuser appgroup && mkdir temptoscafile && chown appuser:appgroup temptoscafile/ +ARG SERVER_PORT +ARG PKG_FILENAME=nbi-rest-services-10.0.0-SNAPSHOT.jar +ADD target/$PKG_FILENAME /opt/onap/app.jar -COPY src/main/resources/certificate /certs -ARG CERT_PASS=changeit -RUN for cert in $(ls -d /certs/*); do \ - echo "adding $cert to java keystore..."; \ - keytool -import \ - -file "$cert" \ - -storepass "${CERT_PASS}" \ - -keystore $JAVA_HOME/lib/security/cacerts \ - -alias "$(basename $cert)" \ - --noprompt; \ - done +RUN mkdir temptoscafile && chown onap:onap temptoscafile/ -USER appuser:appgroup ENV SERVER_PORT=${SERVER_PORT:-8080} -ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom" +ENV JAVA_OPTS=${JAVA_OPTS:--Djava.security.egd=file:/dev/./urandom} EXPOSE $SERVER_PORT -ENTRYPOINT java -XX:+UseContainerSupport $JAVA_OPTS -jar /app.jar +ENTRYPOINT exec java -XX:+UseContainerSupport $JAVA_OPTS -jar /opt/onap/app.jar