diff options
| author |   Luke Hinds <lhinds@redhat.com> | 2017-06-23 07:07:05 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@opnfv.org> | 2017-06-23 07:07:05 +0000 |
| commit | 0b6fc6f47d2ce40d64659f398d025d5bcf2c7feb (patch) | |
| tree | d007d0f4aab9d08d5c0e12f842f6b63877d340de | |
| parent | 095c1132cd927bc081fcf1a656a795f6c268d94b (diff) | |
| parent | 83557fd9970eb89129a5ee93e4ce36c9dff51bf6 (diff) | |
Merge "Run Anteater under Docker as Non-Root User"
| -rw-r--r-- | docker/Dockerfile | 21 |
1 files changed, 14 insertions, 7 deletions
diff --git a/docker/Dockerfile b/docker/Dockerfile index a625e42..7a82583 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -15,10 +15,13 @@ LABEL version="0.1" description="Anteater - OPNFV Gerrit Security Gate Checks" # environment variables ARG BRANCH=master +ARG ANTEATER_USER=opnfv -ENV HOME /home/opnfv -ENV ANT_HOME ${HOME}/anteater -RUN mkdir -p ${ANT_HOME} +# Anteater is run as user 'opnfv' +RUN useradd -U -m -s /bin/bash ${ANTEATER_USER} + +ENV HOME /home/${ANTEATER_USER} +ENV ANTEATER_HOME ${HOME}/anteater # Packaged dependencies RUN yum -y install epel-release @@ -26,8 +29,12 @@ RUN yum -y update RUN yum -y install git python-devel python-pip RUN yum clean all +# Run all following commands and container as non-root user +USER ${ANTEATER_USER} + # Commands to clone and install -RUN git clone https://gerrit.opnfv.org/gerrit/releng-anteater ${ANT_HOME} -WORKDIR ${ANT_HOME} -RUN /usr/bin/pip install -r ${ANT_HOME}/requirements.txt -RUN python ${ANT_HOME}/setup.py install +RUN mkdir -p ${ANTEATER_HOME} +RUN git clone https://gerrit.opnfv.org/gerrit/releng-anteater ${ANTEATER_HOME} +WORKDIR ${ANTEATER_HOME} +RUN /usr/bin/pip install -r ${ANTEATER_HOME}/requirements.txt +RUN python ${ANTEATER_HOME}/setup.py install |