Run API Gateway as non-root user

[msb/apigateway.git] / distributions / msb-apigateway / src / main / docker / Dockerfile

diff --git a/distributions/msb-apigateway/src/main/docker/Dockerfile b/distributions/msb-apigateway/src/main/docker/Dockerfile
index 466dc20..35de11e 100644 (file)
--- a/distributions/msb-apigateway/src/main/docker/Dockerfile
+++ b/distributions/msb-apigateway/src/main/docker/Dockerfile
@@ -4,6 +4,13 @@ COPY msb-apigateway*.tar.gz /usr/src
 \r
 RUN tar -xzf /usr/src/msb-apigateway*.tar.gz -C /usr/local --strip-components=1; \\r
        rm /usr/src/msb-apigateway*.tar.gz\r
-       \r
+RUN apk add --no-cache shadow sudo && \
+    addgroup -g 1000 msb && \
+    adduser -D -u 1000 -G msb msb && \
+    echo "msb ALL=(root) NOPASSWD:ALL" > /etc/sudoers.d/msb && \
+    chmod 0440 /etc/sudoers.d/msb && \
+    chown -R msb:msb /usr/local
+USER msb
+
 WORKDIR /usr/local\r
 ENTRYPOINT exec $PWD/startup4docker.sh