Drop root for designate

Change-Id: I1df05608be62cc008ccef1ca88d0b37983568d22
Partially-Implements: blueprint drop-root

docker/designate/designate-api/Dockerfile.j2

@@ -14,4 +14,6 @@ RUN yum install -y \
 COPY extend_start.sh /usr/local/bin/kolla_extend_start
 RUN chmod 755 /usr/local/bin/kolla_extend_start
 
+USER designate
+
 {{ include_footer }}

docker/designate/designate-api/extend_start.sh

@@ -3,6 +3,6 @@
 # Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases
 # of the KOLLA_BOOTSTRAP variable being set, including empty.
 if [[ "${!KOLLA_BOOTSTRAP[@]}" ]]; then
-    sudo -H -u designate designate-manage db_sync
+    designate-manage db_sync
     exit 0
 fi

docker/designate/designate-backend-bind9/Dockerfile.j2

@@ -12,4 +12,6 @@ RUN yum install -y bind \
     {% endif %}
 {% endif %}
 
+USER designate
+
 {{ include_footer }}

docker/designate/designate-base/Dockerfile.j2

@@ -29,3 +29,5 @@ RUN ln -s designate-base-source/* designate \
     && chown -R designate: /etc/designate /var/log/designate /home/designate
 
 {% endif %}
+
+RUN usermod -a -G kolla designate

docker/designate/designate-central/Dockerfile.j2

@@ -10,4 +10,6 @@ RUN yum install -y openstack-designate-central \
     {% endif %}
 {% endif %}
 
+USER designate
+
 {{ include_footer }}

docker/designate/designate-mdns/Dockerfile.j2

@@ -10,4 +10,6 @@ RUN yum install -y openstack-designate-mdns \
     {% endif %}
 {% endif %}
 
+USER designate
+
 {{ include_footer }}

docker/designate/designate-poolmanager/Dockerfile.j2

@@ -13,4 +13,6 @@ RUN yum install -y \
     {% endif %}
 {% endif %}
 
+USER designate
+
 {{ include_footer }}

docker/designate/designate-sink/Dockerfile.j2

@@ -12,4 +12,6 @@ RUN yum install -y \
     {% endif %}
 {% endif %}
 
+USER designate
+
 {{ include_footer }}