Further log4shell mitigation (#27)

yalelibrary · Dec 16, 2021 · a1962a7 · a1962a7
1 parent f22f7d7
commit a1962a7
Showing 1 changed file with 10 additions and 6 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,10 @@
-FROM solr:8
-
-COPY solr/conf /opt/config
-COPY ops/boot.sh /boot.sh
-USER solr
-ENTRYPOINT ["/boot.sh"]
+FROM solr:8    
+
+USER root    
+RUN apt update && apt install zip    
+COPY solr/conf /opt/config    
+COPY ops/boot.sh /boot.sh    
+RUN zip -q -d /opt/solr/contrib/prometheus-exporter/lib/log4j-core-2.14.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class        
+RUN zip -q -d  /opt/solr/server/lib/ext/log4j-core-2.14.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class        
+USER solr    
+ENTRYPOINT ["/boot.sh"]