Set process as non-root with "USER" instruction.

Thus there is no need to get sudo package.
pull/55/head
luc 9 years ago
parent e180170152
commit 59e4f29687

@ -7,8 +7,7 @@ FROM java:latest
RUN apt-get update && apt-get install -yq \ RUN apt-get update && apt-get install -yq \
ant \ ant \
git \ git \
curl \ curl
sudo
# trace java version # trace java version
RUN java -version RUN java -version
@ -50,5 +49,8 @@ EXPOSE 8090
# Set data volume : yacy data and configuration will persist aven after container stop or destruction # Set data volume : yacy data and configuration will persist aven after container stop or destruction
VOLUME ["/opt/yacy_search_server/DATA"] VOLUME ["/opt/yacy_search_server/DATA"]
# Start yacy as non-root process in debug mode (-d) to display console logs and to wait for yacy process # Next commands run as yacy as non-root user for improved security
CMD sudo -u yacy sh /opt/yacy_search_server/startYACY.sh -d USER yacy
# Start yacy in debug mode (-d) to display console logs and to wait for yacy process
CMD sh /opt/yacy_search_server/startYACY.sh -d

Loading…
Cancel
Save