# ============LICENSE_START===============================================
-# Copyright (C) 2020 Nordix Foundation. All rights reserved.
+# Copyright (C) 2021 Nordix Foundation. All rights reserved.
# ========================================================================
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
FROM python:3.8-slim-buster
-WORKDIR /usr/src/app
-
RUN pip install connexion[swagger-ui]
-#install nginx
-RUN apt-get update
-RUN apt-get install -y nginx=1.14.*
-RUN apt-get install -y nginx-extras
+#install nginx and curl
+RUN apt-get update && apt-get install -y nginx=1.14.* nginx-extras curl
-#install curl
-RUN apt-get install -y curl
+WORKDIR /usr/src/app
-COPY src src
COPY api api
COPY nginx.conf nginx.conf
COPY certificate /usr/src/app/cert
+COPY src src
+
+ARG user=nonrtric
+ARG group=nonrtric
+
+RUN groupadd $user && \
+ useradd -r -g $group $user
+RUN chown -R $user:$group /usr/src/app
+RUN chown -R $user:$group /var/log/nginx
+RUN chown -R $user:$group /var/lib/nginx
+RUN chown -R $user:$group /etc/nginx/conf.d
+RUN touch /var/run/nginx.pid
+RUN chown -R $user:$group /var/run/nginx.pid
+
+USER ${user}
RUN chmod +x src/start.sh
CMD src/start.sh ${A1_VERSION}