From 20258085e93557cbf18d604474f904852cd23091 Mon Sep 17 00:00:00 2001 From: Morten Brekkevold Date: Tue, 9 Nov 2021 09:37:47 +0100 Subject: [PATCH] Make setup scripts executable by group If host system is running with a restrictive umask, these scripts may be copied with a mode of 700. Owned by root, they would not be executable by the www-data user inside a container. --- docker/api/Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/docker/api/Dockerfile b/docker/api/Dockerfile index 0d17688c..06957a31 100644 --- a/docker/api/Dockerfile +++ b/docker/api/Dockerfile @@ -53,6 +53,7 @@ RUN mkdir -p /opt/cnaas/templates /opt/cnaas/settings /opt/cnaas/venv \ # Copy cnaas scripts COPY --chown=root:www-data cnaas-setup.sh createca.sh exec-pre-app.sh nosetests.sh /opt/cnaas/ +RUN cd /opt/cnaas && chmod g+x cnaas-setup.sh createca.sh exec-pre-app.sh nosetests.sh # Copy cnaas configuration files COPY --chown=www-data:www-data config/api.yml config/db_config.yml config/plugins.yml config/repository.yml /etc/cnaas-nms/