Dockerfile: CertService run as certService user

Issue-ID: AAF-995
Signed-off-by: Pawel <pawel.kasperkiewicz@nokia.com>
Change-Id: I53a4554524dd6266c9c8972dc5fa668f09b33ff2

diff --git a/certService/Dockerfile b/certService/Dockerfile
index b6a657a..70617ed 100644 (file)
--- a/certService/Dockerfile
+++ b/certService/Dockerfile
@@ -2,6 +2,12 @@ FROM docker.io/openjdk:11-jre-slim
 
 ARG VERSION=0.0.1-SNAPSHOT
 
-COPY target/cert-service-${VERSION}.jar ./app/cert-service.jar
+RUN groupadd certService && useradd -g certService certService
 
-ENTRYPOINT ["java","-jar","./app/cert-service.jar"]
+RUN chown -R certService:certService /var/log
+
+USER certService:certService
+
+COPY target/cert-service-${VERSION}.jar ./opt/onap/aaf/certservice/cert-service.jar
+
+ENTRYPOINT ["java","-jar","./opt/onap/aaf/certservice/cert-service.jar"]

diff --git a/certService/README.md b/certService/README.md
index 96b1091..431ff1d 100644 (file)
--- a/certService/README.md
+++ b/certService/README.md
@@ -60,4 +60,27 @@ Go to created directory and run
      sudo ./run-csit.sh plans/aaf/cert-service
     
     ```
+### Logs locally
+
+path: 
+
+    ```
+     var/log/onap/aaf/certservice/
+    ```    
+### Logs in Docker container
+    ```
+     docker exec -it cert-service bash
+    ```
+
+path:
+
+    ```
+      cd /var/log/onap/aaf/certservice
+    ```
+You should see:    
+audit.log  error.log  trace.log
+
+
+     
+