Drop root for gnocchi

Updates to ensure commands run in the gnocchi containers
are done as the 'gnocchi' user rather than root.

Change-Id: I2e24300e05d1b2eeaa52bdc6ed3ec4599791136e
Partially-Implements: blueprint drop-root

docker/gnocchi/gnocchi-api/Dockerfile.j2

@@ -17,3 +17,5 @@ COPY extend_start.sh /usr/local/bin/kolla_extend_start
 RUN chmod 755 /usr/local/bin/kolla_extend_start
 
 {{ include_footer }}
+
+USER gnocchi

docker/gnocchi/gnocchi-api/extend_start.sh

@@ -3,6 +3,6 @@
 # Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases
 # of the KOLLA_BOOTSTRAP variable being set, including empty.
 if [[ "${!KOLLA_BOOTSTRAP[@]}" ]]; then
-    sudo -H -u gnocchi gnocchi-manage db_sync
+    gnocchi-manage db_sync
     exit 0
 fi

docker/gnocchi/gnocchi-base/Dockerfile.j2

@@ -23,3 +23,5 @@ RUN ln -s gnocchi-base-source/* gnocchi \
     && chown -R gnocchi: /etc/gnocchi /var/log/gnocchi /home/gnocchi
 
 {% endif %}
+
+RUN usermod -a -G kolla gnocchi

docker/gnocchi/gnocchi-statsd/Dockerfile.j2

@@ -11,3 +11,5 @@ RUN yum install -y openstack-gnocchi-statsd \
 {% endif %}
 
 {{ include_footer }}
+
+USER gnocchi