dzamo opened a new pull request #2328:
URL: https://github.com/apache/drill/pull/2328


   # [MINOR UPDATE] Run Drill using a new non-root "drilluser" account
   
   ## Description
   
   While containers are sandboxed, it is still best practice to run proceses 
within them using non-root accounts.  This adds a non-root "drilluser" to both 
Dockerfiles and fixes a incorrect default JDK base image version number at the 
same time (it's not used in our CI Docker build process but it was wrong 
nonethless, referring to a JRE base image).
   
   ## Documentation
   No change to the user docs for running inside Docker.
   
   ## Testing
   Build and run containers from both Dockerfiles.  Run queries in sqlline to 
CTAS a temp table and then query it.  Shell into a running container to look at 
files and perms in the home directory of the new system account 
(/var/lib/drill).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to