mirror of
https://github.com/goharbor/harbor
synced 2025-04-08 16:23:42 +00:00
6f335bdb1a
This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default
11 lines
328 B
Docker
11 lines
328 B
Docker
FROM vmware/photon:1.0
|
|
|
|
#base image for rsyslog base on photon
|
|
|
|
RUN tdnf distro-sync -y || echo \
|
|
&& tdnf install -y cronie rsyslog shadow tar gzip \
|
|
&& mkdir /etc/rsyslog.d/ \
|
|
&& mkdir /var/spool/rsyslog \
|
|
&& groupadd -r -g 10000 syslog && useradd --no-log-init -r -g 10000 -u 10000 syslog \
|
|
&& tdnf clean all
|