From: Patrick Brady <patrick.brady@att.com>
Date: Wed, 26 Feb 2020 22:38:57 +0000 (-0800)
Subject: Run cdt nodejs as non-root user
X-Git-Tag: 1.7.1~6
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=appc%2Fdeployment.git;a=commitdiff_plain;h=29fccc362781087559262a16d87ab7e2ae9f7f46

Run cdt nodejs as non-root user

Modify the dockerfile so that the nodejs process
that hosts cdt runs as a non-root user.

Change-Id: If64cb915c626897f8815acc3a2007f54adc0e03b
Signed-off-by: Patrick Brady <patrick.brady@att.com>
Issue-ID: APPC-1837
---

diff --git a/cdt/src/main/docker/Dockerfile b/cdt/src/main/docker/Dockerfile
index 26efda4..a826052 100644
--- a/cdt/src/main/docker/Dockerfile
+++ b/cdt/src/main/docker/Dockerfile
@@ -23,8 +23,11 @@
 FROM node:10.15.3-alpine
 MAINTAINER APP-C Team (appc@lists.openecomp.org)
 
-COPY config-design-tool /opt/cdt
-COPY startCdt.sh /opt/startCdt.sh
-COPY cert /opt/cert
-RUN mkdir /opt/cdt/logs
+USER root
+COPY --chown=node:node config-design-tool /opt/cdt
+COPY --chown=node:node startCdt.sh /opt/startCdt.sh
+COPY --chown=node:node cert /opt/cert
 RUN npm install express --save
+USER node
+RUN mkdir /opt/cdt/logs
+