harbor/make/photon/registry/entrypoint.sh

#!/bin/sh

set -e

if [ -d /etc/registry ]; then
    chown 10000:10000 -R /etc/registry
fi
if [ -d /var/lib/registry ]; then
    chown 10000:10000 -R /var/lib/registry
fi  
if [ -d /storage ]; then
    chown 10000:10000 -R /storage
fi  
case "$1" in
    *.yaml|*.yml) set -- registry serve "$@" ;;
    serve|garbage-collect|help|-*) set -- registry "$@" ;;
esac

sudo -E -u \#10000 "$@"
build registry 2017-07-24 12:21:38 +02:00			`#!/bin/sh`

			`set -e`

Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`if [ -d /etc/registry ]; then`
			`chown 10000:10000 -R /etc/registry`
			`fi`
			`if [ -d /var/lib/registry ]; then`
			`chown 10000:10000 -R /var/lib/registry`
			`fi`
			`if [ -d /storage ]; then`
			`chown 10000:10000 -R /storage`
			`fi`
build registry 2017-07-24 12:21:38 +02:00			`case "$1" in`
			`.yaml\|.yml) set -- registry serve "$@" ;;`
			`serve\|garbage-collect\|help\|-*) set -- registry "$@" ;;`
			`esac`

Deprivilege harobr-log, harbor-db, registry image. This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default 2017-11-02 04:51:32 +01:00			`sudo -E -u \#10000 "$@"`