From: yangyan <yangyanyj@chinamobile.com>
Date: Tue, 9 Apr 2019 05:15:12 +0000 (+0800)
Subject: Modify docker file
X-Git-Tag: 1.3.0~50
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=a65096b93684ff0798728c5d3b8eb7f15096ad7e;p=vfc%2Fnfvo%2Flcm.git

Modify docker file

Change-Id: Iefc908ad1bf96aa804a1083f56ad557f69e8b9a0
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
Issue-ID: VFC-1343
---

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 47837923..0b98e5e9 100755
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -23,7 +23,11 @@ RUN apt-get update && \
     apt-get install -y curl && \
     apt-get install -y build-essential && \
 #    apt-get install -y libssl-dev && \
-    apt-get install -y libffi-dev
+    apt-get install -y libffi-dev && \
+    groupadd -r onap && useradd -r -g onap onap && \
+    chmod u+w /etc/sudoers && \
+    sed -i '/User privilege/a\\onap    ALL=(ALL:ALL) NOPASSWD:ALL' /etc/sudoers && \
+    chmod u-x /etc/sudoers
 
 ADD . /service
 WORKDIR /service
@@ -31,7 +35,8 @@ WORKDIR /service
 # get binary zip from nexus - vfc-nfvo-lcm
 RUN wget -q -O vfc-nfvo-lcm.zip 'https://nexus.onap.org/service/local/artifact/maven/redirect?r=snapshots&g=org.onap.vfc.nfvo.lcm&a=vfc-nfvo-lcm&v=LATEST&e=zip' && \
     unzip vfc-nfvo-lcm.zip && \
-    rm -rf vfc-nfvo-lcm.zip
+    rm -rf vfc-nfvo-lcm.zip && \
+    chown onap:onap /service -R
 
 WORKDIR /service/vfc/nfvo/lcm
 RUN pip install --upgrade setuptools pip && \
@@ -40,6 +45,6 @@ RUN pip install --upgrade setuptools pip && \
 RUN apt-get --purge remove -y wget unzip gcc libssl-dev
 
 EXPOSE 8403
-
+USER onap
 WORKDIR /service
 ENTRYPOINT vfc/nfvo/lcm/docker/docker-entrypoint.sh