Base image fixes (sec + compat)
poikilotherm opened this issue · comments
Oliver Bertuch commented
The preparation to run the containers on OpenShift introduced an error in the base image: the USER payara
statement after fixing the domain dir permissions is missing, so keeps user root
.
In addition, to prepare for Ubuntu 24.04 we need to change:
netcat
->netcat-openbsd
(avail in 22.04 and 24.04)adduser
->useradd
addgroup
->groupadd
- Also, we make
payara
a system user, but use UID 1000, which is beyond the system user range. Let's fix that. - In addition, we should adapt good practices and have a script to change the user password by env var/secret file, warning users they are using a default password and which that is
- Same for the Payara admin user password