X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=installation%2Fdmaap-listener%2Fsrc%2Fmain%2Fdocker%2FDockerfile;h=51ae3ad188c26b5743a9978440027a9af832a391;hb=refs%2Fheads%2Fmaster;hp=49a70e4f22a1a1353ac4fac2644ad1549fbb01c0;hpb=0ead46e4dc3bf3fbf0cdf8a76cbf0c5d6e0b191b;p=sdnc%2Foam.git

diff --git a/installation/dmaap-listener/src/main/docker/Dockerfile b/installation/dmaap-listener/src/main/docker/Dockerfile
index 49a70e4f..51ae3ad1 100644
--- a/installation/dmaap-listener/src/main/docker/Dockerfile
+++ b/installation/dmaap-listener/src/main/docker/Dockerfile
@@ -1,11 +1,30 @@
 # Base ubuntu with added packages needed for open ecomp
-FROM onap/ccsdk-ubuntu-image:${ccsdk.distribution.version}
-MAINTAINER SDNC Team (onap-sdnc@lists.onap.org)
-ENV JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64
+FROM onap/ccsdk-alpine-j17-image:${ccsdk.docker.version} AS stage0
+USER root
 ENV SDNC_CONFIG_DIR /opt/onap/sdnc/data/properties
 
-
 # copy deliverables to opt
 COPY opt /opt
 
+# Remediate log4shell vuln
+RUN apk add zip
+RUN zip -q -d /opt/onap/sdnc/dmaap-listener/lib/log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
+
+# End of stage 0
+
+FROM onap/ccsdk-alpine-j17-image:${ccsdk.docker.version}
+
+MAINTAINER SDNC Team (onap-sdnc@lists.onap.org)
+
+ENV SDNC_CONFIG_DIR /opt/onap/sdnc/data/properties
+
+USER root
+
+# Create sdnc user
+RUN addgroup -S sdnc && adduser -S sdnc -G sdnc
+
+# Copy /opt and change owner/group to sdnc
+COPY --from=stage0 --chown=sdnc:sdnc /opt /opt
+
 
+USER sdnc