0b2682e489
Zun processes were run as user 'root' in before. This is undesirable for several reasons (i.e. security, privsep). This patch make the Zun processes run as 'zun' user, which aligns with the practice of other containers. Change-Id: I0d3111f0ca6301d6f22410fe5fd5a2dbf586e691 Closes-Bug: #1787760
17 lines
422 B
Django/Jinja
17 lines
422 B
Django/Jinja
FROM {{ namespace }}/{{ image_prefix }}zun-base:{{ tag }}
|
|
LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build_date }}"
|
|
|
|
{% block zun_wsproxy_header %}{% endblock %}
|
|
|
|
{% if install_type == 'binary' %}
|
|
|
|
RUN echo '{{ install_type }} not yet available for {{ base_distro }}' \
|
|
&& /bin/false
|
|
|
|
{% endif %}
|
|
|
|
{% block zun_wsproxy_footer %}{% endblock %}
|
|
{% block footer %}{% endblock %}
|
|
|
|
USER zun
|