diff options
| author | Paul Bourke <paul.bourke@oracle.com> | 2015-11-17 17:54:21 +0000 |
|---|---|---|
| committer | Paul Bourke <paul.bourke@oracle.com> | 2015-11-17 18:02:18 +0000 |
| commit | 1a536124ada8645d2fa1abb3c8c898afb531847e (patch) | |
| tree | 9c29437cddf501a444b294fe8b73459abe8985e4 /docker/magnum | |
| parent | df0ef8ddb504fef0eddffd09127e1bb98a3fca88 (diff) | |
| download | kolla-1a536124ada8645d2fa1abb3c8c898afb531847e.tar.gz kolla-1a536124ada8645d2fa1abb3c8c898afb531847e.zip | |
Drop root for Magnum
This change ensures commands run in the magnum containers are done as the
'magnum' user rather than root.
Change-Id: I18e2febae98aae6d6fc6c61cc2817442f408cb75
Partially-Implements: blueprint drop-root
Diffstat (limited to 'docker/magnum')
| -rw-r--r-- | docker/magnum/magnum-api/Dockerfile.j2 | 2 | ||||
| -rw-r--r-- | docker/magnum/magnum-api/extend_start.sh | 2 | ||||
| -rw-r--r-- | docker/magnum/magnum-conductor/Dockerfile.j2 | 2 |
3 files changed, 5 insertions, 1 deletions
diff --git a/docker/magnum/magnum-api/Dockerfile.j2 b/docker/magnum/magnum-api/Dockerfile.j2 index 3a613ab34..f1264f5df 100644 --- a/docker/magnum/magnum-api/Dockerfile.j2 +++ b/docker/magnum/magnum-api/Dockerfile.j2 @@ -14,3 +14,5 @@ COPY extend_start.sh /usr/local/bin/kolla_extend_start RUN chmod 755 /usr/local/bin/kolla_extend_start {{ include_footer }} + +USER magnum diff --git a/docker/magnum/magnum-api/extend_start.sh b/docker/magnum/magnum-api/extend_start.sh index f6db67556..0f92f6e7b 100644 --- a/docker/magnum/magnum-api/extend_start.sh +++ b/docker/magnum/magnum-api/extend_start.sh @@ -3,6 +3,6 @@ # Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases # of the KOLLA_BOOTSTRAP variable being set, including empty. if [[ "${!KOLLA_BOOTSTRAP[@]}" ]]; then - sudo -H -u magnum magnum-db-manage upgrade + magnum-db-manage upgrade exit 0 fi diff --git a/docker/magnum/magnum-conductor/Dockerfile.j2 b/docker/magnum/magnum-conductor/Dockerfile.j2 index 4e9eaef43..e31e46f99 100644 --- a/docker/magnum/magnum-conductor/Dockerfile.j2 +++ b/docker/magnum/magnum-conductor/Dockerfile.j2 @@ -16,3 +16,5 @@ RUN cd /tmp && curl -L https://github.com/GoogleCloudPlatform/kubernetes/release {% endif %} {{ include_footer }} + +USER magnum |