mirror of
https://github.com/goharbor/harbor.git
synced 2024-11-25 03:35:21 +01:00
6f335bdb1a
This change involves using non-root user to run the process of the docker images. Also made update in Dockerfile to make the containers support "read-only" and introduce "HEALTHCHECK". Note the "read-only" options are not enabled in docker-compose, to cover the very corner case when user wants to update the container filesystem manually. Remove read only option from docker-compose template by default
8 lines
133 B
Bash
8 lines
133 B
Bash
#!/bin/bash
|
|
set -e
|
|
chown -R 10000:10000 /var/log/docker
|
|
crond
|
|
rm -f /var/run/rsyslogd.pid
|
|
sudo -u \#10000 -E 'rsyslogd' '-n'
|
|
set +e
|