aboutsummaryrefslogtreecommitdiff
path: root/docker
diff options
context:
space:
mode:
authorChristian Berendt <berendt@betacloud-solutions.de>2016-10-17 10:54:47 +0200
committerChristian Berendt <berendt@betacloud-solutions.de>2016-10-17 10:54:47 +0200
commit5668427b4bf6b44d4b5137d21053379f0dd68f22 (patch)
tree184b1fdd307db2fd14701dc7cd57722d03e8f846 /docker
parent2fde030fd4245e0288c4ec3789ab217bf0e3c2ef (diff)
downloadkolla-5668427b4bf6b44d4b5137d21053379f0dd68f22.tar.gz
kolla-5668427b4bf6b44d4b5137d21053379f0dd68f22.zip
Merge run commands in elasticsearch container
TrivialFix Change-Id: Ie7d090ad4665a3549a8072eed30ab1b820354c83
Diffstat (limited to 'docker')
-rw-r--r--docker/elasticsearch/Dockerfile.j215
1 files changed, 8 insertions, 7 deletions
diff --git a/docker/elasticsearch/Dockerfile.j2 b/docker/elasticsearch/Dockerfile.j2
index 1b3a2badf..5cb80f5a6 100644
--- a/docker/elasticsearch/Dockerfile.j2
+++ b/docker/elasticsearch/Dockerfile.j2
@@ -26,16 +26,17 @@ ENV JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64/
{{ macros.install_packages(elasticsearch_packages | customizable("packages")) }}
COPY elasticsearch_sudoers /etc/sudoers.d/kolla_elasticsearch_sudoers
COPY extend_start.sh /usr/local/bin/kolla_extend_start
+
+# NOTE: By default the shell of the elasticsearch user is /bin/false. We have to
+# change the shell to /bin/bash to be able to run elasticsearch as a non-root user.
+#
+# https://discuss.elastic.co/t/running-as-non-root-user-service-wrapper-has-changed/7863
+
RUN chmod 755 /usr/local/bin/kolla_extend_start \
&& chmod 750 /etc/sudoers.d \
&& chmod 440 /etc/sudoers.d/kolla_elasticsearch_sudoers \
- && usermod -a -G kolla elasticsearch
-
-
-# by default elasticsearch shell is /bin/false, we need
-# /bin/bash to run elasticsearch as non-root
-# https://discuss.elastic.co/t/running-as-non-root-user-service-wrapper-has-changed/7863
-RUN usermod -s /bin/bash elasticsearch -d /usr/share/elasticsearch
+ && usermod -a -G kolla elasticsearch \
+ && usermod -s /bin/bash elasticsearch -d /usr/share/elasticsearch
{% block elasticsearch_footer %}{% endblock %}
{% block footer %}{% endblock %}