From 3ef57a9ed68580d5185fefb2ab9a22926f26d441 Mon Sep 17 00:00:00 2001 From: "Swapnil Kulkarni (coolsvap)" Date: Mon, 30 Nov 2015 11:28:58 +0530 Subject: Drop root for nova Updates to ensure commands run in the nova containers are done as the 'nova' user rather than root. Change-Id: I0dd0276c2848ad77d92d350dfa0f20161329ed55 Partially-Implements: blueprint drop-root --- docker/nova/nova-api/Dockerfile.j2 | 2 ++ docker/nova/nova-api/extend_start.sh | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) (limited to 'docker/nova/nova-api') diff --git a/docker/nova/nova-api/Dockerfile.j2 b/docker/nova/nova-api/Dockerfile.j2 index bd5270ac6..ef5fd1b44 100644 --- a/docker/nova/nova-api/Dockerfile.j2 +++ b/docker/nova/nova-api/Dockerfile.j2 @@ -14,3 +14,5 @@ COPY extend_start.sh /usr/local/bin/kolla_extend_start RUN chmod 755 /usr/local/bin/kolla_extend_start {{ include_footer }} + +USER nova diff --git a/docker/nova/nova-api/extend_start.sh b/docker/nova/nova-api/extend_start.sh index 9b0e9d746..93b63d53f 100644 --- a/docker/nova/nova-api/extend_start.sh +++ b/docker/nova/nova-api/extend_start.sh @@ -3,6 +3,6 @@ # Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases # of the KOLLA_BOOTSTRAP variable being set, including empty. if [[ "${!KOLLA_BOOTSTRAP[@]}" ]]; then - sudo -H -u nova nova-manage db sync + nova-manage db sync exit 0 fi -- cgit v1.2.3