aboutsummaryrefslogtreecommitdiff
path: root/docker/zun/zun-compute/Dockerfile.j2
diff options
context:
space:
mode:
authorHongbin Lu <hongbin034@gmail.com>2018-09-30 16:51:38 +0000
committerHongbin Lu <hongbin034@gmail.com>2018-10-01 03:57:12 +0000
commit0c8d3f0586a5bbd797ee38786b58d004091dd104 (patch)
tree70c3383219e9728ec6a6a66cba53d0e8b381c99f /docker/zun/zun-compute/Dockerfile.j2
parent570a6120be48dde70a793be52574a0ae1e0fce6f (diff)
downloadkolla-0c8d3f0586a5bbd797ee38786b58d004091dd104.tar.gz
kolla-0c8d3f0586a5bbd797ee38786b58d004091dd104.zip
Add user 'zun' to group 'docker'
Zun compute needs to access the docker socket for API call. The socket is owned by 'docker' group and the zun-compute process is owned by 'zun' user. In order to allow the access, this commit add zun user to docker group. Change-Id: Ifa7d399242dddf8d07f8b495b344752131a0f110
Diffstat (limited to 'docker/zun/zun-compute/Dockerfile.j2')
-rw-r--r--docker/zun/zun-compute/Dockerfile.j27
1 files changed, 7 insertions, 0 deletions
diff --git a/docker/zun/zun-compute/Dockerfile.j2 b/docker/zun/zun-compute/Dockerfile.j2
index 23ab689f7..33061893b 100644
--- a/docker/zun/zun-compute/Dockerfile.j2
+++ b/docker/zun/zun-compute/Dockerfile.j2
@@ -10,6 +10,13 @@ RUN echo '{{ install_type }} not yet available for {{ base_distro }}' \
{% endif %}
+COPY zun_sudoers /etc/sudoers.d/kolla_zun_sudoers
+COPY extend_start.sh /usr/local/bin/kolla_zun_extend_start
+
+RUN chmod 755 /usr/local/bin/kolla_zun_extend_start \
+ && chmod 750 /etc/sudoers.d \
+ && chmod 640 /etc/sudoers.d/kolla_zun_sudoers
+
{% block zun_compute_footer %}{% endblock %}
{% block footer %}{% endblock %}