X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=deliveries%2FDockerfile.widgetms;h=8f4b1072e1a3c2506f0cc21441a372a66dc5840f;hb=c5f2d6ebd2f1624ee63f818996b7361a9c7b477f;hp=72a11bb5ceef820a566447393823cbe186e81fb4;hpb=6a4a349a1be3ad5460e507dc4e2098936fd23859;p=portal.git diff --git a/deliveries/Dockerfile.widgetms b/deliveries/Dockerfile.widgetms index 72a11bb5..8f4b1072 100644 --- a/deliveries/Dockerfile.widgetms +++ b/deliveries/Dockerfile.widgetms @@ -1,7 +1,8 @@ # Large image # FROM openjdk:8-jdk # Tiny image; it includes java and nc -FROM frolvlad/alpine-oraclejdk8:slim +#FROM frolvlad/alpine-oraclejdk8:slim +FROM openjdk:8-jdk-alpine # Arguments are supplied by build script; # the defaults below only support testing @@ -10,10 +11,12 @@ ARG WMS_JAR=build/widget-ms.jar COPY ${WMS_JAR} /app.jar RUN sh -c 'touch /app.jar' -# Wait script, which depends on nc -COPY wait-for.sh / # Launch script -COPY start-wms-cmd.sh / +COPY start-wms.sh / + +# Switch to unprivileged user +RUN addgroup -g 1000 -S portal && adduser -u 1000 -S portal -G portal && mkdir logs / && chown -R portal:portal /start-wms.sh /tmp /etc/ssl/certs/java /logs && chmod -R 755 /start-wms.sh /etc/ssl/certs/java /logs /tmp +USER portal # Define default command -CMD /start-wms-cmd.sh +CMD /start-wms.sh