Skip to content

Commit

Permalink
Make setup scripts executable by group
Browse files Browse the repository at this point in the history
If host system is running with a restrictive umask, these scripts may be
copied with a mode of 700. Owned by root, they would not be executable
by the www-data user inside a container.
  • Loading branch information
lunkwill42 committed Sep 14, 2022
1 parent 33dd4c8 commit 2025808
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions docker/api/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,7 @@ RUN mkdir -p /opt/cnaas/templates /opt/cnaas/settings /opt/cnaas/venv \

# Copy cnaas scripts
COPY --chown=root:www-data cnaas-setup.sh createca.sh exec-pre-app.sh nosetests.sh /opt/cnaas/
RUN cd /opt/cnaas && chmod g+x cnaas-setup.sh createca.sh exec-pre-app.sh nosetests.sh

# Copy cnaas configuration files
COPY --chown=www-data:www-data config/api.yml config/db_config.yml config/plugins.yml config/repository.yml /etc/cnaas-nms/
Expand Down

0 comments on commit 2025808

Please sign in to comment.