X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=rulemgt-standalone%2Fsrc%2Fmain%2Fassembly%2FDockerfile;h=f5d895927f89f0ef68bacb4affbee909e3893e8b;hb=42fcee46204b7a1e2a99660ecb47533b137aa345;hp=106d7ac1697bdda9be8b938afc842ad6f66c4d26;hpb=6a95a9070a4040a77dcf06f8d6255239f7991072;p=holmes%2Frule-management.git

diff --git a/rulemgt-standalone/src/main/assembly/Dockerfile b/rulemgt-standalone/src/main/assembly/Dockerfile
index 106d7ac..f5d8959 100644
--- a/rulemgt-standalone/src/main/assembly/Dockerfile
+++ b/rulemgt-standalone/src/main/assembly/Dockerfile
@@ -35,6 +35,8 @@ RUN apk upgrade \
     && apk add --no-cache curl \
     && apk add --no-cache postgresql-client=10.5-r0
 
+
+
 #add the frontend pacakge to the docker images
 RUN rm /etc/nginx/conf.d/default.conf
 RUN mkdir -p /etc/ssl/certs/
@@ -45,11 +47,16 @@ ADD holmes-frontend.key /etc/ssl/private
 ADD holmes-frontend-selfsigned.crt /etc/ssl/certs
 ADD dhparam.pem /etc/ssl/certs
 
+#switch the user to holmes
+RUN addgroup -S holmes && adduser -S -G holmes holmes
+
 #add the backend package to the docker image
-RUN mkdir /home/holmes
 WORKDIR /home/holmes
 ADD holmes-rulemgt-standalone-*-linux64.tar.gz /home/holmes/
+RUN chmod -R a+rw /home/holmes/
+RUN chmod -R a+rw /var/log/
 RUN chmod 755 /home/holmes/bin/*.sh
 
+USER holmes
 CMD ["sh", "/home/holmes/bin/run.sh"]