From: sunil unnava <sunil.unnava@att.com>
Date: Tue, 12 Feb 2019 20:16:02 +0000 (-0500)
Subject: run container as non root user
X-Git-Tag: 3.0.1-ONAP^2
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=dmaap%2Fkafka11aaf.git;a=commitdiff_plain;h=6bd0d04630efa61bff5711395cc7e5c532cba052

run container as non root user

Issue-ID: DMAAP-1040
Change-Id: I98557ba333477f7ad8878ac53cd9e2005e044e8a
Signed-off-by: sunil unnava <sunil.unnava@att.com>
---

diff --git a/src/main/docker/Dockerfile b/src/main/docker/Dockerfile
index 024d075..d08cc51 100644
--- a/src/main/docker/Dockerfile
+++ b/src/main/docker/Dockerfile
@@ -31,12 +31,11 @@ ADD create-topics.sh /usr/bin/create-topics.sh
 ADD start-kafkaOrMirrorMaker.sh /usr/bin/start-kafkaOrMirrorMaker.sh
 ADD start-mirrormaker.sh /usr/bin/start-mirrormaker.sh
 ADD kafka-run-class.sh ${KAFKA_HOME}/bin/kafka-run-class.sh
-# The scripts need to have executable permission
-RUN chmod a+x /usr/bin/start-kafka.sh && \
-    chmod a+x /usr/bin/broker-list.sh && \
-    chmod a+x /usr/bin/start-kafkaOrMirrorMaker.sh && \
-    chmod a+x /usr/bin/start-mirrormaker.sh && \
-    chmod a+x ${KAFKA_HOME}/bin/kafka-run-class.sh && \
-    chmod a+x /usr/bin/create-topics.sh
-# Use "exec" form so that it runs as PID 1 (useful for graceful shutdown)
+
+RUN set -x \
+    && useradd kafka \
+    && chown -R kafka:kafka  /opt/kafka /opt/logs /opt/etc /kafka /tmp/kafka-logs /usr/bin
+
+USER kafka
+
 CMD ["start-kafkaOrMirrorMaker.sh"]