aboutsummaryrefslogtreecommitdiff
path: root/docker/haproxy
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2016-05-27 21:19:45 +0000
committerGerrit Code Review <review@openstack.org>2016-05-27 21:19:46 +0000
commit162fa258297651bb4d6e7dcda241684ce6e40641 (patch)
treee56f1cf6e7a3c7a19a4081503549f7b60c370f73 /docker/haproxy
parentcd4602819c954547c74e3dc6c2e13aae0e393460 (diff)
parenta5c1aa0b81db71fb2e293ad45c8dc920d07b8a20 (diff)
downloadkolla-162fa258297651bb4d6e7dcda241684ce6e40641.tar.gz
kolla-162fa258297651bb4d6e7dcda241684ce6e40641.zip
Merge "Run HAProxy in a chroot jail"
Diffstat (limited to 'docker/haproxy')
-rw-r--r--docker/haproxy/Dockerfile.j24
1 files changed, 4 insertions, 0 deletions
diff --git a/docker/haproxy/Dockerfile.j2 b/docker/haproxy/Dockerfile.j2
index cade3b26c..922f52054 100644
--- a/docker/haproxy/Dockerfile.j2
+++ b/docker/haproxy/Dockerfile.j2
@@ -15,6 +15,10 @@ RUN apt-get -y install --no-install-recommends \
{% endif %}
+RUN usermod -a -G kolla haproxy \
+ && mkdir -p /var/lib/kolla/haproxy \
+ && chown -R haproxy: /var/lib /run
+
COPY ensure_latest_config.sh /usr/local/bin/kolla_ensure_haproxy_latest_config
RUN chmod 755 /usr/local/bin/kolla_ensure_haproxy_latest_config