TLS sdc-be-init: truststore & keystore handling

[sdc.git] / catalog-be / sdc-backend-init / Dockerfile

diff --git a/catalog-be/sdc-backend-init/Dockerfile b/catalog-be/sdc-backend-init/Dockerfile
index d9f0237..4013733 100644 (file)
--- a/catalog-be/sdc-backend-init/Dockerfile
+++ b/catalog-be/sdc-backend-init/Dockerfile
@@ -1,11 +1,55 @@
-FROM onap/base_sdc-python:1.2.0-SNAPSHOT-latest
+FROM onap/integration-python:8.0.0
 
-COPY chef-solo /root/chef-solo/
+USER root
 
-COPY chef-repo/cookbooks /root/chef-solo/cookbooks/
+# Needed for pycurl
+ENV PYCURL_SSL_LIBRARY=openssl
 
-COPY startup.sh /root/
+# Install packages only needed for building
+RUN apk update && \
+    apk add binutils jq libpng && \
+    apk add --no-cache \
+        libcurl \
+        ruby && \
+    apk add --no-cache --virtual .build-dependencies \
+        libressl-dev \
+        ruby-dev \
+        libffi-dev \
+        libxml2-dev \
+        build-base \
+        curl-dev && \
+    # needed libcurl to install correctly \
+    python -m pip install --upgrade pip \
+    pip install 'pycurl==7.44.1' && \
+    set -ex && \
+    gem update --system --no-document && \
+    gem install --no-update-sources public_suffix:4.0.7 multipart-post:2.2.0 etc:1.3.0 bundler:2.3.26 chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 webrick --no-document && \
+    apk del .build-dependencies && \
+    gem cleanup
 
-RUN chmod 770 /root/startup.sh
+ENV ONAP_LOG=/home/onap/logs
+RUN mkdir $ONAP_LOG && chown onap:onap $ONAP_LOG
 
-ENTRYPOINT [ "/root/startup.sh" ]
+# user/group are the same as in integration/docker/onap-python base image
+ENV user=onap group=onap
+
+USER onap
+
+# user/group args are inherited from base_sdc-python base image
+COPY --chown=onap:onap scripts /home/onap/scripts
+
+RUN chmod 770 -R /home/onap/scripts && \
+    cd /home/onap/scripts && \
+    python setup.py install --user
+
+ENV PATH=$PATH:/home/onap/.local/bin
+
+COPY --chown=onap:onap chef-solo /home/onap/chef-solo/
+COPY --chown=onap:onap chef-repo/cookbooks /home/onap/chef-solo/cookbooks/
+COPY --chown=onap:onap startup.sh /home/onap/
+
+RUN chmod 770 /home/onap/startup.sh
+
+WORKDIR /home/onap/
+
+ENTRYPOINT /home/${user}/startup.sh