From 29fccc362781087559262a16d87ab7e2ae9f7f46 Mon Sep 17 00:00:00 2001 From: Patrick Brady Date: Wed, 26 Feb 2020 14:38:57 -0800 Subject: [PATCH] Run cdt nodejs as non-root user Modify the dockerfile so that the nodejs process that hosts cdt runs as a non-root user. Change-Id: If64cb915c626897f8815acc3a2007f54adc0e03b Signed-off-by: Patrick Brady Issue-ID: APPC-1837 --- cdt/src/main/docker/Dockerfile | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/cdt/src/main/docker/Dockerfile b/cdt/src/main/docker/Dockerfile index 26efda4..a826052 100644 --- a/cdt/src/main/docker/Dockerfile +++ b/cdt/src/main/docker/Dockerfile @@ -23,8 +23,11 @@ FROM node:10.15.3-alpine MAINTAINER APP-C Team (appc@lists.openecomp.org) -COPY config-design-tool /opt/cdt -COPY startCdt.sh /opt/startCdt.sh -COPY cert /opt/cert -RUN mkdir /opt/cdt/logs +USER root +COPY --chown=node:node config-design-tool /opt/cdt +COPY --chown=node:node startCdt.sh /opt/startCdt.sh +COPY --chown=node:node cert /opt/cert RUN npm install express --save +USER node +RUN mkdir /opt/cdt/logs + -- 2.16.6