Browse Source

Update Spyglass to run as “airship” user in container

Spyglass previously ran as root in container

Change-Id: I341679fcb6173ca667f009dfc100237f32275ef2
changes/88/698088/2
Ryan Schroder 3 years ago
parent
commit
f53c51edc1
  1. 3
      images/spyglass/Dockerfile.opensuse_15
  2. 3
      images/spyglass/Dockerfile.ubuntu_bionic
  3. 3
      images/spyglass/Dockerfile.ubuntu_xenial

3
images/spyglass/Dockerfile.opensuse_15

@ -28,6 +28,7 @@ RUN set -x \
&& zypper --non-interactive install python3-six-1.12.0-lp151.80.1.noarch
RUN pip3 install -U pip \
&& zypper clean -a \
&& useradd -u 1000 -g users -d /opt/spyglass airship \
&& rm -rf \
/tmp/* \
/usr/share/doc \
@ -45,3 +46,5 @@ RUN pip3 install pipenv && pipenv install --system --deploy --ignore-pipfile
COPY . /opt/spyglass
RUN pip3 install -e /opt/spyglass
USER airship

3
images/spyglass/Dockerfile.ubuntu_bionic

@ -26,6 +26,7 @@ RUN set -ex \
&& python3 -m pip install -U pip \
&& apt-get autoremove -yqq --purge \
&& apt-get clean \
&& useradd -u 1000 -g users -d /opt/spyglass airship \
&& rm -rf \
/tmp/* \
/usr/share/doc \
@ -43,3 +44,5 @@ RUN pip3 install pipenv && pipenv install --system --deploy --ignore-pipfile
COPY . /opt/spyglass
RUN pip3 install -e /opt/spyglass
USER airship

3
images/spyglass/Dockerfile.ubuntu_xenial

@ -26,6 +26,7 @@ RUN set -ex \
&& python3 -m pip install -U pip \
&& apt-get autoremove -yqq --purge \
&& apt-get clean \
&& useradd -u 1000 -g users -d /opt/spyglass airship \
&& rm -rf \
/tmp/* \
/usr/share/doc \
@ -44,3 +45,5 @@ RUN pip3 install pipenv \
COPY . /opt/spyglass
RUN pip3 install -e /opt/spyglass
USER airship

Loading…
Cancel
Save