yujunjun/datahub
2
0
Fork 0
mirror of https://github.com/datahub-project/datahub.git synced 2025-12-25 17:08:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

docker: Run as non-root user in docker (#1914)

Browse Source
This commit is contained in:
Fredrik Sannholm 2020-10-06 14:35:38 +03:00 committed by GitHub
parent c067c0f03b
commit 125ae288f1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docker/datahub-frontend/Dockerfile
View File

@ -13,7 +13,11 @@ RUN cd datahub-src && ./gradlew :datahub-frontend:dist \
FROM openjdk:8-jre-alpine
RUN addgroup -S datahub && adduser -S datahub -G datahub
COPY --from=builder /datahub-frontend /datahub-frontend/
RUN chown -R datahub:datahub /datahub-frontend && chmod 755 /datahub-frontend
USER datahub
EXPOSE 9001
ENV JAVA_OPTS=" \
@ -23,5 +27,6 @@ ENV JAVA_OPTS=" \
-Dconfig.file=datahub-frontend/conf/application.conf \
-Djava.security.auth.login.config=datahub-frontend/conf/jaas.conf \
-Dlogback.configurationFile=datahub-frontend/conf/logback.xml \
-Dlogback.debug=true"
-Dlogback.debug=true \
-Dpidfile.path=/datahub-frontend/play.pid"
CMD ["datahub-frontend/bin/playBinary"]

3
docker/datahub-gms/Dockerfile
View File

@ -23,6 +23,9 @@ FROM base as dev-install
FROM ${APP_ENV}-install as final
RUN addgroup -S datahub && adduser -S datahub -G datahub
USER datahub
EXPOSE 8080
CMD /datahub/datahub-gms/scripts/start.sh

3
docker/datahub-mae-consumer/Dockerfile
View File

@ -29,6 +29,9 @@ FROM base as dev-install
FROM ${APP_ENV}-install as final
RUN addgroup -S datahub && adduser -S datahub -G datahub
USER datahub
EXPOSE 9090
CMD /datahub/datahub-mae-consumer/scripts/start.sh

3
docker/datahub-mce-consumer/Dockerfile
View File

@ -29,6 +29,9 @@ FROM base as dev-install
FROM ${APP_ENV}-install as final
RUN addgroup -S datahub && adduser -S datahub -G datahub
USER datahub
EXPOSE 9090
CMD /datahub/datahub-mce-consumer/scripts/start.sh