7595dfce78
Updates to ensure commands run in the swift containers are done as the 'swift' user rather than root. Change-Id: I8c5a12e24b9940200241dbe09d6bde8f1cc1cf05 Closes-Bug: #1553895 Co-Authored-By: Serguei Bezverkhi <sbezverk@cisco.com>
58 lines
1.7 KiB
Django/Jinja
58 lines
1.7 KiB
Django/Jinja
FROM {{ namespace }}/{{ image_prefix }}openstack-base:{{ tag }}
|
|
MAINTAINER {{ maintainer }}
|
|
|
|
{% if install_type == 'binary' %}
|
|
{% if base_distro in ['centos', 'fedora', 'oraclelinux', 'rhel'] %}
|
|
|
|
RUN yum -y install openstack-swift \
|
|
&& yum clean all
|
|
|
|
{% elif base_distro in ['ubuntu'] %}
|
|
|
|
RUN apt-get install -y --no-install-recommends \
|
|
swift \
|
|
&& apt-get clean
|
|
|
|
{% endif %}
|
|
{% elif install_type == 'source' %}
|
|
{% if base_distro in ['centos', 'fedora', 'oraclelinux', 'rhel'] %}
|
|
|
|
RUN yum -y install \
|
|
liberasurecode-devel \
|
|
&& yum clean all
|
|
|
|
{% elif base_distro in ['ubuntu'] %}
|
|
|
|
RUN apt-get install -y --no-install-recommends \
|
|
liberasurecode-dev \
|
|
&& apt-get clean
|
|
|
|
{% endif %}
|
|
|
|
ADD swift-base-archive /swift-base-source
|
|
RUN ln -s swift-base-source/* swift \
|
|
&& useradd --user-group swift \
|
|
&& /var/lib/kolla/venv/bin/pip --no-cache-dir install --upgrade -c requirements/upper-constraints.txt /swift \
|
|
&& mkdir -p /etc/swift /var/log/swift /home/swift \
|
|
&& cp -r /swift/etc/* /etc/swift/ \
|
|
&& chown -R swift: /etc/swift /var/log/swift /home/swift
|
|
|
|
{% endif %}
|
|
|
|
RUN pip install oslo.rootwrap
|
|
|
|
COPY swift-rootwrap /var/lib/kolla/venv/bin/swift-rootwrap
|
|
COPY rootwrap.conf /etc/swift/rootwrap.conf
|
|
RUN chmod 755 /var/lib/kolla/venv/bin/swift-rootwrap \
|
|
&& chmod 644 /etc/swift/rootwrap.conf \
|
|
&& sed -i 's|^exec_dirs.*|exec_dirs=/var/lib/kolla/venv/bin,/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin|g' /etc/swift/rootwrap.conf
|
|
|
|
COPY swift_sudoers /etc/sudoers.d/swift_sudoers
|
|
RUN chmod 750 /etc/sudoers.d \
|
|
&& chmod 440 /etc/sudoers.d/swift_sudoers
|
|
|
|
COPY build-swift-ring.py /usr/local/bin/kolla_build_swift_ring
|
|
RUN mkdir -p /opt/swift
|
|
|
|
RUN usermod -a -G kolla swift
|