[VVP] Ensure VVP Docker runs as non-root

Also ensures VVP only executes the heat tests and ignores
app_tests

Change-Id: I59ba2f72ac694dee4e705787d24a78ac983afa3a
Issue-ID: VVP-175
Signed-off-by: Lovett, Trevor <trevor.lovett@att.com>

diff --git a/Dockerfile b/Dockerfile
index fe626fa..8d24022 100644 (file)
--- a/Dockerfile
+++ b/Dockerfile
@@ -42,8 +42,11 @@ COPY requirements.txt /
 RUN pip install --upgrade pip
 RUN pip install --no-use-pep517 -r /requirements.txt
 
 RUN pip install --upgrade pip
 RUN pip install --no-use-pep517 -r /requirements.txt
 

-COPY ice_validator/ /vvp
+RUN adduser -D vvpuser
+USER vvpuser
+
+COPY --chown=vvpuser ice_validator/ /vvp

 
 WORKDIR /vvp
 
 
 WORKDIR /vvp
 

-ENTRYPOINT ["pytest"]
+ENTRYPOINT ["pytest", "tests"]