@@ -78,15 +78,41 @@ RUN mkdir /logs \
7878 && mkdir /etc/wlp \
7979 && chown -R 1001:0 /etc/wlp \
8080 && chmod -R g+rw /etc/wlp \
81- && echo "<server description=\"Default Server\"><httpEndpoint id=\"defaultHttpEndpoint\" host=\"*\" /></server>" > /config/configDropins/defaults/open-default-port.xml
81+ && mkdir -p /opt/ol/links \
82+ && chown -R 1001:0 /opt/ol/links \
83+ && chmod -R g+rw /opt/ol/links
84+
85+ # Create second-level symlinks as non-root user
86+ USER 1001
87+
88+ RUN mkdir -p $WLP_OUTPUT_DIR/defaultServer \
89+ && ln -s $WLP_OUTPUT_DIR/defaultServer /opt/ol/links/output \
90+ && ln -s /opt/ol/wlp/usr/servers/defaultServer /opt/ol/links/config \
91+ && mkdir -p /opt/ol/links/config/configDropins/defaults \
92+ && mkdir -p /opt/ol/links/config/configDropins/overrides \
93+ && echo "<server description=\"Default Server\"><httpEndpoint id=\"defaultHttpEndpoint\" host=\"*\" /></server>" > /opt/ol/links/config/configDropins/defaults/open-default-port.xml
94+
95+ # Create first-level symlinks as root user
96+ USER 0
97+
98+ RUN ln -s /opt/ol/links/output /output \
99+ && ln -s /opt/ol/links/config /config \
100+ && chown -R 1001:0 /opt/ol/links/output \
101+ && chmod -R g+rw /opt/ol/links/output \
102+ && chown -R 1001:0 /opt/ol/links/config \
103+ && chmod -R g+rw /opt/ol/links/config \
104+ && chown -R 1001:0 /config \
105+ && chmod -R g+rw /config \
106+ && chown -R 1001:0 /output \
107+ && chmod -R g+rw /output
82108
83109# Create a new SCC layer
84110RUN if [ "$OPENJ9_SCC" = "true" ]; then populate_scc.sh; fi \
85111 && rm -rf /output/messaging /output/resources/security /logs/* $WLP_OUTPUT_DIR/.classCache /output/workarea \
86112 && chown -R 1001:0 /opt/ol/wlp/output \
87113 && chmod -R g+rwx /opt/ol/wlp/output
88114
89- #These settings are needed so that we can run as a different user than 1001 after server warmup
115+ # These settings are needed so that we can run as a different user than 1001 after server warmup
90116ENV RANDFILE=/tmp/.rnd \
91117 OPENJ9_JAVA_OPTIONS="-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningGcOnIdle -Xshareclasses:name=openj9_system_scc,cacheDir=/opt/java/.scc,readonly,nonFatal -Dosgi.checkConfiguration=false"
92118
0 commit comments