Merge branch 'ATS-341' into 'master'

ATS-341 : ATS: Shadow MNT-20344: ATS docker images should not run as root

See merge request Repository/alfresco-docker-transformers!50

alfresco-docker-alfresco-pdf-renderer/Dockerfile

@@ -9,6 +9,12 @@ ENV ALFRESCO_PDF_RENDERER_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/l
 ENV PDFIUM_LICENSE_FILE=https://github.com/Alfresco/acs-community-packaging/blob/master/distribution/src/main/resources/licenses/3rd-party/pdfium.txt
 ENV JAVA_OPTS="-Xms256M -Xmx2048M"
 
+# Set default user information
+ARG GROUPNAME=Alfresco
+ARG GROUPID=1000
+ARG USERNAME=pdf
+ARG USERID=33001
+
 COPY target/alfresco-docker-alfresco-pdf-renderer-${env.project_version}.jar /usr/bin
 
 RUN ln /usr/bin/alfresco-docker-alfresco-pdf-renderer-${env.project_version}.jar /usr/bin/alfresco-docker-alfresco-pdf-renderer.jar && \
@@ -24,7 +30,13 @@ ADD target/generated-resources/licenses              /licenses
 ADD target/generated-resources/licenses.xml          /licenses/
 ADD target/generated-sources/license/THIRD-PARTY.txt /licenses/
 
+RUN groupadd -g ${GROUPID} ${GROUPNAME} && \
+    useradd -u ${USERID} -G ${GROUPNAME} ${USERNAME} && \
+    chgrp -R ${GROUPNAME} /usr/bin/alfresco-docker-alfresco-pdf-renderer.jar
+
 EXPOSE 8090
 
+USER ${USERNAME}
+
 ENTRYPOINT java $JAVA_OPTS -jar /usr/bin/alfresco-docker-alfresco-pdf-renderer.jar
 

alfresco-docker-imagemagick/Dockerfile

@@ -10,6 +10,12 @@ ENV IMAGEMAGICK_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repos
 ENV IMAGEMAGICK_LICENSE_FILE=https://github.com/Alfresco/acs-community-packaging/blob/master/distribution/src/main/resources/licenses/3rd-party/ImageMagick-license.txt
 ENV JAVA_OPTS="-Xms256M -Xmx2048M"
 
+# Set default user information
+ARG GROUPNAME=Alfresco
+ARG GROUPID=1000
+ARG USERNAME=imagemagick
+ARG USERID=33002
+
 COPY target/alfresco-docker-imagemagick-${env.project_version}.jar /usr/bin
 
 RUN ln /usr/bin/alfresco-docker-imagemagick-${env.project_version}.jar /usr/bin/alfresco-docker-imagemagick.jar && \
@@ -26,6 +32,12 @@ ADD target/generated-resources/licenses              /licenses
 ADD target/generated-resources/licenses.xml          /licenses/
 ADD target/generated-sources/license/THIRD-PARTY.txt /licenses/
 
+RUN groupadd -g ${GROUPID} ${GROUPNAME} && \
+    useradd -u ${USERID} -G ${GROUPNAME} ${USERNAME} && \
+    chgrp -R ${GROUPNAME} /usr/bin/alfresco-docker-imagemagick.jar
+
 EXPOSE 8090
 
+USER ${USERNAME}
+
 ENTRYPOINT java $JAVA_OPTS -jar /usr/bin/alfresco-docker-imagemagick.jar

alfresco-docker-libreoffice/Dockerfile

@@ -9,6 +9,12 @@ ENV LIBREOFFICE_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositor
 ENV LIBREOFFICE_LICENSE_FILE=https://github.com/Alfresco/acs-community-packaging/blob/master/distribution/src/main/resources/licenses/3rd-party/libreoffice.txt
 ENV JAVA_OPTS="-Xms256M -Xmx2048M"
 
+# Set default user information
+ARG GROUPNAME=Alfresco
+ARG GROUPID=1000
+ARG USERNAME=libreoffice
+ARG USERID=33003
+
 COPY target/alfresco-docker-libreoffice-${env.project_version}.jar /usr/bin
 
 RUN ln /usr/bin/alfresco-docker-libreoffice-${env.project_version}.jar /usr/bin/alfresco-docker-libreoffice.jar && \
@@ -26,6 +32,12 @@ ADD target/generated-resources/licenses              /licenses
 ADD target/generated-resources/licenses.xml          /licenses/
 ADD target/generated-sources/license/THIRD-PARTY.txt /licenses/
 
+RUN groupadd -g ${GROUPID} ${GROUPNAME} && \
+    useradd -u ${USERID} -G ${GROUPNAME} ${USERNAME} && \
+    chgrp -R ${GROUPNAME} /usr/bin/alfresco-docker-libreoffice.jar
+
 EXPOSE 8090
 
+USER ${USERNAME}
+
 ENTRYPOINT java $JAVA_OPTS -jar /usr/bin/alfresco-docker-libreoffice.jar

alfresco-docker-tika/Dockerfile

@@ -8,6 +8,12 @@ FROM alfresco/alfresco-base-java:11.0.1-openjdk-centos-7-1fd3c4475374
 ENV APACHE_LICENSE_FILE=https://github.com/Alfresco/acs-community-packaging/blob/master/distribution/src/main/resources/licenses/3rd-party/Apache%202.0.txt
 ENV JAVA_OPTS="-Xms256M -Xmx2048M"
 
+# Set default user information
+ARG GROUPNAME=Alfresco
+ARG GROUPID=1000
+ARG USERNAME=tika
+ARG USERID=33004
+
 COPY target/alfresco-docker-tika-${env.project_version}.jar /usr/bin
 
 RUN ln /usr/bin/alfresco-docker-tika-${env.project_version}.jar /usr/bin/alfresco-docker-tika.jar && \
@@ -20,6 +26,12 @@ ADD target/generated-resources/licenses              /licenses
 ADD target/generated-resources/licenses.xml          /licenses/
 ADD target/generated-sources/license/THIRD-PARTY.txt /licenses/
 
+RUN groupadd -g ${GROUPID} ${GROUPNAME} && \
+    useradd -u ${USERID} -G ${GROUPNAME} ${USERNAME} && \
+    chgrp -R ${GROUPNAME} /usr/bin/alfresco-docker-tika.jar
+
 EXPOSE 8090
 
+USER ${USERNAME}
+
 ENTRYPOINT java $JAVA_OPTS -jar /usr/bin/alfresco-docker-tika.jar