Skip to content

Commit b6a39f0

Browse files
committed
WIP fn user added to runtime image, working on adding user to the init-image
1 parent b0e110c commit b6a39f0

2 files changed

Lines changed: 4 additions & 0 deletions

File tree

images/runtime/Dockerfile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ COPY src/main/c/libfnunixsocket.so /function/runtime/lib/
44

55
RUN ["/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java", "-Xshare:dump"]
66

7+
RUN addgroup -g 1000 -S fn && adduser -S -u 1000 -G fn fn
8+
79
# UseCGroupMemoryLimitForHeap looks up /sys/fs/cgroup/memory/memory.limit_in_bytes inside the container to determine
810
# what the heap should be set to. This is an experimental feature at the moment, thus we need to unlock to use it.
911
#

images/runtime/Dockerfile-jre11

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ COPY src/main/c/libfnunixsocket.so /function/runtime/lib/
44

55
RUN ["/usr/bin/java", "-Xshare:dump"]
66

7+
RUN addgroup -g 1000 -S fn && adduser -S -u 1000 -G fn fn
8+
79
# The UseExeperimentalVMOptions, UseCGroupMemoryLimitForHeap and MaxRAMFraction options that were used in the JDK 9 builds are
810
# no longer supported in JDK 11 - so these have been removed. We now rely on the built-in ContainerSupport option that Linux JDKs
911
# use to configure themselves when detecting they are running in a container.

0 commit comments

Comments
 (0)