UNCLASSIFIED

Commit f3360583 authored by WingKwan Lau's avatar WingKwan Lau
Browse files

Update Dockerfile

parent d5c653c4
Pipeline #341778 passed with stages
in 13 minutes and 6 seconds
...@@ -39,16 +39,10 @@ RUN INSTALL_PKGS="vim-enhanced rsync iputils bind-utils git python38 python38-de ...@@ -39,16 +39,10 @@ RUN INSTALL_PKGS="vim-enhanced rsync iputils bind-utils git python38 python38-de
rpm -V $INSTALL_PKGS && \ rpm -V $INSTALL_PKGS && \
yum -y clean all --enablerepo="*" yum -y clean all --enablerepo="*"
# - Create a Python virtual environment for use by any application to avoid # - Create a Python virtual environment for use by any application to avoid potential conflicts with Python packages
# potential conflicts with Python packages preinstalled in the main Python # preinstalled in the main Python installation.
# installation.
# - In order to drop the root user, we have to make some directories world
# writable as multi-tenant Kubernetes clusters' default security model
# should run the container under a random UID.
# - For any python applications use this default user
RUN python$PYTHON_VERSION -m venv ${APP_ROOT} && /usr/bin/py-enable RUN python$PYTHON_VERSION -m venv ${APP_ROOT} && /usr/bin/py-enable
# Set up container user and adjust permissions to run in OpenShift environment # Set up container user and adjust permissions to run in OpenShift environment
WORKDIR ${HOME} WORKDIR ${HOME}
RUN useradd -u 1001 -r -g 0 -d ${HOME} -s /sbin/nologin \ RUN useradd -u 1001 -r -g 0 -d ${HOME} -s /sbin/nologin \
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment