Run cassandra schema job as a non-root user by default (#3043)

Signed-off-by: chgl <[email protected]>
jaegertracing · Jun 4, 2021 · 2687983 · 2687983
1 parent 394ec23
commit 2687983
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/plugin/storage/cassandra/Dockerfile b/plugin/storage/cassandra/Dockerfile
@@ -3,4 +3,9 @@ FROM cassandra:3.11
 COPY schema/* /cassandra-schema/
 
 ENV CQLSH_HOST=cassandra
+
+RUN groupadd -g 65532 nonroot && \
+    useradd -u 65532 -g nonroot nonroot --create-home
+
+USER 65532:65532
 ENTRYPOINT ["/cassandra-schema/docker.sh"]