No-root (#276)

* No-root * delete TO DO comment
Gradiant · Aug 22, 2024 · be9c9bb · be9c9bb
1 parent 1b69775
commit be9c9bb
Show file tree

Hide file tree

Showing 8 changed files with 14 additions and 7 deletions.
diff --git a/docs/open5gs-and-srsran-4g-usrp/config/mme.yaml b/docs/open5gs-and-srsran-4g-usrp/config/mme.yaml
@@ -1,5 +1,6 @@
 logger:
-  file: /opt/open5gs/var/log/open5gs/mme.log
+  file:
+    path: /opt/open5gs/var/log/open5gs/mme.log
 #  level: info   # fatal|error|warn|info(default)|debug|trace
 
 global:

diff --git a/docs/open5gs-and-srsran-4g-usrp/epc.yaml b/docs/open5gs-and-srsran-4g-usrp/epc.yaml
@@ -34,6 +34,7 @@ services:
     restart : on-failure
   upf:
     image: gradiant/open5gs:2.7.1
+    user: root
     command: ["open5gs-upfd"]
     cap_add:
       - all

diff --git a/docs/open5gs-and-srsran-4g/epc.yaml b/docs/open5gs-and-srsran-4g/epc.yaml
@@ -32,6 +32,7 @@ services:
     restart : on-failure
   upf:
     image: gradiant/open5gs:2.7.1
+    user: root
     command: ["open5gs-upfd"]
     cap_add:
       - all

diff --git a/docs/open5gs-and-srsran-5g/config/smf.yaml b/docs/open5gs-and-srsran-5g/config/smf.yaml
@@ -1,5 +1,6 @@
 logger:
-  file: /opt/open5gs/var/log/open5gs/smf.log
+  file:
+    path: /opt/open5gs/var/log/open5gs/smf.log
 #  level: info   # fatal|error|warn|info(default)|debug|trace
 
 global:

diff --git a/docs/open5gs-and-srsran-5g/core.yaml b/docs/open5gs-and-srsran-5g/core.yaml
@@ -69,6 +69,7 @@ services:
 
   upf:
     image: gradiant/open5gs:2.7.1
+    user: root
     command:
       - open5gs-upfd
     cap_add:

diff --git a/docs/open5gs-and-ueransim/config/smf.yaml b/docs/open5gs-and-ueransim/config/smf.yaml
@@ -1,5 +1,6 @@
 logger:
-  file: /opt/open5gs/var/log/open5gs/smf.log
+  file:
+    path: /opt/open5gs/var/log/open5gs/smf.log
 #  level: info   # fatal|error|warn|info(default)|debug|trace
 
 global:

diff --git a/docs/open5gs-and-ueransim/ngc.yaml b/docs/open5gs-and-ueransim/ngc.yaml
@@ -74,6 +74,7 @@ services:
 
   upf:
     image: gradiant/open5gs:2.7.1
+    user: root
     command:
     - open5gs-upfd
     cap_add:

diff --git a/images/open5gs/Dockerfile b/images/open5gs/Dockerfile
@@ -102,10 +102,10 @@ ENV PATH=${APP_ROOT}/bin:${PATH} HOME=${APP_ROOT}
 WORKDIR ${APP_ROOT}
 COPY entrypoint.sh /entrypoint.sh
 
-# TODO: run with non-root user
-#RUN groupadd -r open5gs && useradd --no-log-init -r -g open5gs open5gs
-#RUN chown -R open5gs:open5gs ${APP_ROOT}
-#USER open5gs
+#Run with non-root user
+RUN groupadd -r open5gs && useradd --no-log-init -r -g open5gs open5gs
+RUN chown -R open5gs:open5gs ${APP_ROOT}
+USER open5gs
 
 #Default CONF values
 ENV DB_URI=mongodb://mongo/open5gs