From 41033e32e04f3d36b77aa9b2597e5c414486f06a Mon Sep 17 00:00:00 2001 From: Jacek Kowalski <Jacek@jacekk.info> Date: Wed, 18 Oct 2017 20:58:34 +0000 Subject: [PATCH] Run image as user unifi using USER directive and not sudo --- Dockerfile | 24 ++++++++++++++++-------- 1 files changed, 16 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index c2a3b08..5c8419b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,21 +1,29 @@ -FROM debian +FROM openjdk:8-jre-slim MAINTAINER Jacek Kowalski <Jacek@jacekk.info> -ENV UNIFI_VERSION 4.8.15 +ENV UNIFI_VERSION 5.4.19 RUN apt-get update \ - && apt-get -y dist-upgrade \ - && apt-get -y install wget jsvc openjdk-7-jre-headless mongodb-server binutils \ - && apt-get -y clean + && apt-get -y install \ + wget jsvc mongodb-server binutils procps sudo \ + && apt-get -y clean \ + && rm -Rf /var/lib/apt/lists/* RUN cd /tmp \ - && wget "http://dl.ubnt.com/unifi/${UNIFI_VERSION}/unifi_sysvinit_all.deb" \ + && wget "https://www.ubnt.com/downloads/unifi/${UNIFI_VERSION}/unifi_sysvinit_all.deb" \ && dpkg -i unifi_sysvinit_all.deb \ - && rm -rf /var/lib/unifi/* + && rm -rf unifi_sysvinit_all.deb /var/lib/unifi/* \ + && groupadd -r -g 500 unifi \ + && useradd -r -d /usr/lib/unifi -u 500 -g 500 unifi \ + && mkdir /usr/lib/unifi/data /var/lib/unifi \ + && chown -Rf unifi:unifi /usr/lib/unifi /var/lib/unifi EXPOSE 8080 8081 8443 8843 8880 VOLUME /usr/lib/unifi/data WORKDIR /var/lib/unifi -CMD ["/usr/bin/java", "-Xmx1024M", "-jar", "/usr/lib/unifi/lib/ace.jar", "start"] +COPY run.sh /run.sh +CMD /run.sh + +USER unifi -- Gitblit v1.9.1