From 351d7463fc9042190e3b856eef3581ab69571228 Mon Sep 17 00:00:00 2001 From: Oleg Skrypnyuk Date: Wed, 20 May 2026 15:55:45 +0200 Subject: [PATCH 1/3] Adjust /camunda permissions --- Dockerfile | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6465417..b12c467 100644 --- a/Dockerfile +++ b/Dockerfile @@ -82,10 +82,12 @@ RUN apk add --no-cache \ RUN addgroup -g 1000 -S camunda && \ adduser -u 1000 -S camunda -G camunda -h /camunda -s /bin/bash -D camunda + +COPY --chown=camunda:camunda --from=builder /camunda . WORKDIR /camunda +RUN chgrp -R 0 /camunda && \ + chmod -R g=u /camunda USER camunda ENTRYPOINT ["/sbin/tini", "--"] CMD ["./cibseven.sh"] - -COPY --chown=camunda:camunda --from=builder /camunda . From 362e28419229e2a7176fba9fc96d474be778d591 Mon Sep 17 00:00:00 2001 From: Oleg Skrypnyuk Date: Wed, 20 May 2026 17:07:23 +0200 Subject: [PATCH 2/3] Reorganize Dockerfile to copy files and set permissions --- Dockerfile | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index b12c467..5b5fbeb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -82,12 +82,13 @@ RUN apk add --no-cache \ RUN addgroup -g 1000 -S camunda && \ adduser -u 1000 -S camunda -G camunda -h /camunda -s /bin/bash -D camunda - -COPY --chown=camunda:camunda --from=builder /camunda . WORKDIR /camunda -RUN chgrp -R 0 /camunda && \ - chmod -R g=u /camunda USER camunda ENTRYPOINT ["/sbin/tini", "--"] CMD ["./cibseven.sh"] + +COPY --chown=camunda:camunda --from=builder /camunda . + +RUN chgrp -R 0 /camunda && \ + chmod -R g=u /camunda From 987140c61e2239c3e7e799339debd8dbc2f2b4b4 Mon Sep 17 00:00:00 2001 From: Oleg Skrypnyuk Date: Wed, 20 May 2026 17:07:47 +0200 Subject: [PATCH 3/3] Change pod creation method in Jenkinsfile --- Jenkinsfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Jenkinsfile b/Jenkinsfile index 10b40f4..131f972 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -12,7 +12,7 @@ def cibsevenVersion = "" pipeline { agent { kubernetes { - yaml BuildPodCreator.cibStandardPod() + yaml BuildPodCreator.fromScratch(this) .withMavenJdk17Container() .withKanikoContainer() .asYaml()