Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-710 HV VES Improvements
  3. DCAEGEN2-1431

Do not run HV-VES container as root

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Done
    • Icon: High High
    • El Alto Release
    • None
    • None
    • None

      Create user for running the collector and make sure it has rights to read config and write logs.

      https://wiki.onap.org/display/DW/DCAE+R4+M4+Code+Freeze+Milestone+Checklist

       

       

      https://wiki.onap.org/display/DW/Best+Practices :

      USER

      Do not run containers as root. Use USER to change to an non-root user.

      Create the user and group as in this example:

      RUN groupadd -r postgres && useradd --no-log-init -r -g postgres postgres .

      Avoid installing or using sudo. If you need to, use "gosu" instead.

      To minimize the number of layers, avoid switching USER back and forth frequently.

            jaszczur jaszczur
            jaszczur jaszczur
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: