X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=deliveries%2FDockerfile.widgetms;h=8f4b1072e1a3c2506f0cc21441a372a66dc5840f;hb=57379c29d8457eb88258328e3c9c7679b2a40274;hp=16bf60b111aeb342b1e4cf2fe55d79fd5afc7d40;hpb=978dbcf0a196acbafad72fe1e2478ec0e384f02f;p=portal.git

diff --git a/deliveries/Dockerfile.widgetms b/deliveries/Dockerfile.widgetms
index 16bf60b1..8f4b1072 100644
--- a/deliveries/Dockerfile.widgetms
+++ b/deliveries/Dockerfile.widgetms
@@ -1,18 +1,22 @@
 # Large image
 # FROM openjdk:8-jdk
-# Very small image
-FROM frolvlad/alpine-oraclejdk8:slim
+# Tiny image; it includes java and nc
+#FROM frolvlad/alpine-oraclejdk8:slim
+FROM openjdk:8-jdk-alpine
 
 # Arguments are supplied by build script;
 # the defaults below only support testing
 ARG WMS_JAR=build/widget-ms.jar
-# Launch script
-COPY start-wms-cmd.sh /
-# Wait script, which depends on nc
-COPY wait-for.sh /
 # Onejar
 COPY ${WMS_JAR} /app.jar
 RUN sh -c 'touch /app.jar'
-VOLUME /tmp
-ENV JAVA_OPTS=""
-CMD /start-wms-cmd.sh
+
+# Launch script
+COPY start-wms.sh /
+
+# Switch to unprivileged user
+RUN addgroup -g 1000 -S portal && adduser -u 1000 -S portal -G portal && mkdir logs / && chown -R portal:portal /start-wms.sh /tmp /etc/ssl/certs/java /logs && chmod -R 755 /start-wms.sh /etc/ssl/certs/java /logs /tmp
+USER portal
+
+# Define default command
+CMD /start-wms.sh