Skip to content

Commit 50b5a37

Browse files
committed
Running 389 directory server as a dirsrv(non-root) user
1 parent 019f3e8 commit 50b5a37

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

src/bci_build/package/appcontainers.py

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -130,13 +130,17 @@ def _envsubst_pkg_name(os_version: OsVersion) -> str:
130130
custom_end=rf"""
131131
COPY nsswitch.conf /etc/nsswitch.conf
132132
133-
{DOCKERFILE_RUN} mkdir -p /data/config; \
133+
{DOCKERFILE_RUN} install -d -o dirsrv -g dirsrv /data; \
134+
install -d -o dirsrv -g dirsrv /data/config; \
134135
mkdir -p /data/ssca; \
135136
mkdir -p /data/run; \
136137
mkdir -p /var/run/dirsrv; \
137138
ln -s /data/config /etc/dirsrv/slapd-localhost; \
138139
ln -s /data/ssca /etc/dirsrv/ssca; \
139-
ln -s /data/run /var/run/dirsrv
140+
ln -s /data/run /var/run/dirsrv; \
141+
chown -R dirsrv: /data;\
142+
chown -R dirsrv: /var/run/dirsrv; \
143+
chgrp -R dirsrv /etc/dirsrv;
140144
141145
HEALTHCHECK --start-period=5m --timeout=5s --interval=5s --retries=2 \
142146
CMD /usr/lib/dirsrv/dscontainer -H

0 commit comments

Comments
 (0)