Set explicit uid and gid in dockerfiles

This fixes permission issues with shared nfs volumes caused by
mismatch in dynamically assigned gid and uid between containers.

Issue-ID: CCSDK-2398
Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca>
Change-Id: Ie47873c98211b280490ee7a6bcc60ceef49dd690

diff --git a/ms/blueprintsprocessor/application/src/main/docker/Dockerfile b/ms/blueprintsprocessor/application/src/main/docker/Dockerfile
index bd1b380..e9c4c58 100755 (executable)
--- a/ms/blueprintsprocessor/application/src/main/docker/Dockerfile
+++ b/ms/blueprintsprocessor/application/src/main/docker/Dockerfile
@@ -9,7 +9,7 @@ FROM omahoco1/alpine-java-python
 
 # add entrypoint
 COPY startService.sh /startService.sh
-RUN addgroup -S onap && adduser -S onap -G onap
+RUN addgroup -S -g 1000 onap && adduser -u 1000 -S onap -G onap
 RUN chown onap:onap /startService.sh
 RUN touch /velocity.log && chmod 777 /velocity.log
 RUN chown onap:onap /velocity.log

diff --git a/ms/command-executor/src/main/docker/Dockerfile b/ms/command-executor/src/main/docker/Dockerfile
index e84d553..610e10c 100644 (file)
--- a/ms/command-executor/src/main/docker/Dockerfile
+++ b/ms/command-executor/src/main/docker/Dockerfile
@@ -5,7 +5,7 @@ RUN python -m pip install --upgrade pip
 RUN pip install grpcio==${GRPC_PYTHON_VERSION} grpcio-tools==${GRPC_PYTHON_VERSION}
 RUN pip install virtualenv==16.7.9 pympler==0.8
 
-RUN groupadd -r onap && useradd -r -g onap onap
+RUN groupadd -r -g 1000 onap && useradd -r -u 1000 -g onap onap
 
 COPY start.sh /opt/app/onap/start.sh
 RUN chmod u+x /opt/app/onap/start.sh

diff --git a/ms/py-executor/docker/Dockerfile b/ms/py-executor/docker/Dockerfile
index 638b09f..eb43b73 100644 (file)
--- a/ms/py-executor/docker/Dockerfile
+++ b/ms/py-executor/docker/Dockerfile
@@ -1,6 +1,6 @@
 FROM python:3.7-slim
 
-RUN groupadd -r onap && useradd -r -g onap onap
+RUN groupadd -r -g 1000 onap && useradd -u 1000 -r -g onap onap
 
 RUN mkdir -p /opt/app/onap/logs/ && touch /opt/app/onap/logs/application.log
 

diff --git a/ms/sdclistener/distribution/src/main/docker/Dockerfile b/ms/sdclistener/distribution/src/main/docker/Dockerfile
index e9ecb8d..41622fa 100755 (executable)
--- a/ms/sdclistener/distribution/src/main/docker/Dockerfile
+++ b/ms/sdclistener/distribution/src/main/docker/Dockerfile
@@ -1,6 +1,6 @@
 FROM openjdk:8-jdk-alpine
 
-RUN addgroup -S onap && adduser -S onap -G onap
+RUN addgroup -S -g 1000 onap && adduser -S onap -u 1000 -G onap
 # add entrypoint
 COPY startService.sh /startService.sh
 RUN chown onap:onap /startService.sh