Browse Source

Dockerfile: Improve file permissions for docker build images using bind9

/etc/init.d/bind9 is run as the 'bind' user. This fixes file permissions
for the configuration files added by the Dockerfile to match.
Joe Betz 8 years ago
parent
commit
abc81d03a7
2 changed files with 8 additions and 6 deletions
  1. 4 3
      e2e/docker-dns-srv/Dockerfile
  2. 4 3
      e2e/docker-dns/Dockerfile

+ 4 - 3
e2e/docker-dns-srv/Dockerfile

@@ -2,16 +2,17 @@ FROM golang:1.9.1-stretch
 LABEL Description="Image for etcd DNS SRV testing"
 
 RUN apt update -y \
-  && apt install -y \
+  && apt install -y -q \
   bind9 \
   dnsutils
 
-RUN mkdir /var/bind
-RUN chown bind /var/bind
+RUN mkdir -p /var/bind /etc/bind
+RUN chown root:bind /var/bind /etc/bind
 ADD Procfile /Procfile
 ADD run.sh /run.sh
 
 ADD named.conf etcd.zone rdns.zone /etc/bind/
+RUN chown root:bind /etc/bind/named.conf /etc/bind/etcd.zone /etc/bind/rdns.zone
 ADD resolv.conf /etc/resolv.conf
 
 RUN go get github.com/mattn/goreman

+ 4 - 3
e2e/docker-dns/Dockerfile

@@ -2,16 +2,17 @@ FROM golang:1.9.1-stretch
 LABEL Description="Image for etcd DNS testing"
 
 RUN apt update -y \
-  && apt install -y \
+  && apt install -y -q \
   bind9 \
   dnsutils
 
-RUN mkdir /var/bind
-RUN chown bind /var/bind
+RUN mkdir -p /var/bind /etc/bind
+RUN chown root:bind /var/bind /etc/bind
 ADD Procfile.tls /Procfile.tls
 ADD run.sh /run.sh
 
 ADD named.conf etcd.zone rdns.zone /etc/bind/
+RUN chown root:bind /etc/bind/named.conf /etc/bind/etcd.zone /etc/bind/rdns.zone
 ADD resolv.conf /etc/resolv.conf
 
 RUN go get github.com/mattn/goreman