From: ecaiyanlinux <martin.c.yan@est.tech>
Date: Wed, 12 Jan 2022 07:59:59 +0000 (+0100)
Subject: Use non-root user in Dockerfile for nonrtric-gateway
X-Git-Tag: 2.4.0~12
X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F72%2F7572%2F1;p=portal%2Fnonrtric-controlpanel.git

Use non-root user in Dockerfile for nonrtric-gateway

Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
Issue-ID: NONRTRIC-647
Change-Id: Ie4524fb4091d7b4ac676cd0f0bdadab7e8197b91
---

diff --git a/nonrtric-gateway/Dockerfile b/nonrtric-gateway/Dockerfile
index f803a9c..5472edf 100644
--- a/nonrtric-gateway/Dockerfile
+++ b/nonrtric-gateway/Dockerfile
@@ -29,7 +29,14 @@ EXPOSE 9090
 ADD /config/application.yaml /opt/app/nonrtric-gateway/config/application.yaml
 ADD target/${JAR} /opt/app/nonrtric-gateway/nonrtric-gateway.jar
 
+ARG user=nonrtric
+ARG group=nonrtric
 
-RUN chmod -R 777 /opt/app/nonrtric-gateway/config/
+RUN groupadd $user && \
+    useradd -r -g $group $user
+RUN chown -R $user:$group /opt/app/nonrtric-gateway
+RUN chown -R $user:$group /var/log/nonrtric-gateway
+
+USER ${user}
 
 CMD ["java", "-jar", "/opt/app/nonrtric-gateway/nonrtric-gateway.jar"]