harbor/make/photon/log/start.sh
root 6f335bdb1a Deprivilege harobr-log, harbor-db, registry image.
This change involves using non-root user to run the process of the
docker images.  Also made update in Dockerfile to make the containers
support "read-only" and introduce "HEALTHCHECK". Note the "read-only"
options are not enabled in docker-compose, to cover the very corner
case when user wants to update the container filesystem manually.

Remove read only option from docker-compose template by default
2017-11-02 23:35:06 -07:00

8 lines
133 B
Bash

#!/bin/bash
set -e
chown -R 10000:10000 /var/log/docker
crond
rm -f /var/run/rsyslogd.pid
sudo -u \#10000 -E 'rsyslogd' '-n'
set +e