steve
/
geoserver
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

introduce geoserver user as docker user

pull/39/head
Andre Henn 2023-12-12 14:28:16 +01:00
parent 4bc82ce2ba
commit b108b4be06
No known key found for this signature in database
GPG Key ID: 776670F973DDECAA
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Dockerfile
View File

@ -136,7 +136,17 @@ RUN cd $CATALINA_HOME/lib \
# copy scripts
COPY *.sh /opt/
RUN chmod +x /opt/*.sh
# GeoServer user => restrict access to $CATALINA_HOME and GeoServer directories
# See also CIS Docker benchmark and docker best practices
RUN chmod +x /opt/*.sh \
&& groupadd geoserver \
&& useradd --no-log-init -r -g geoserver geoserver \
&& chown -R geoserver:geoserver $CATALINA_HOME \
&& chmod g-w,o-rwx $CATALINA_HOME \
&& chown -R geoserver:geoserver $GEOSERVER_DATA_DIR \
&& chown -R geoserver:geoserver $GEOSERVER_LIB_DIR
USER geoserver
ENTRYPOINT ["/opt/startup.sh"]