harbor/make/photon/log/start.sh

#!/bin/bash
set -e
chown -R 10000:10000 /var/log/docker
crond
rm -f /var/run/rsyslogd.pid
sudo -u \#10000 -E  'rsyslogd' '-n'
set +e
Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`#!/bin/bash`
			`set -e`
			`chown -R 10000:10000 /var/log/docker`
			`crond`
			`rm -f /var/run/rsyslogd.pid`
			`sudo -u \#10000 -E 'rsyslogd' '-n'`
			`set +e`