@@ -85,18 +85,9 @@ RUN mkdir /logs \
8585 && mkdir /etc/wlp \
8686 && mkdir -p /opt/ibm/wlp/usr/shared/resources/lib.index.cache \
8787 && mkdir -p /home/default \
88- && mkdir /output \
89- && chmod -t /output \
90- && rm -rf /output \
91- && ln -s $WLP_OUTPUT_DIR/defaultServer /output \
92- && ln -s /opt/ibm/wlp/usr/servers/defaultServer /config \
9388 && ln -s /opt/ibm /liberty \
9489 && ln -s /opt/ibm/fixes /fixes \
9590 && ln -s /opt/ibm/wlp/usr/shared/resources/lib.index.cache /lib.index.cache \
96- && mkdir -p /config/configDropins/defaults \
97- && mkdir -p /config/configDropins/overrides \
98- && chown -R 1001:0 /config \
99- && chmod -R g+rw /config \
10091 && chown -R 1001:0 /opt/ibm/helpers \
10192 && chmod -R g+rwx /opt/ibm/helpers \
10293 && chown -R 1001:0 /opt/ibm/fixes \
@@ -110,7 +101,36 @@ RUN mkdir /logs \
110101 && chown -R 1001:0 /etc/wlp \
111102 && chmod -R g+rw /etc/wlp \
112103 && chown -R 1001:0 /home/default \
113- && chmod -R g+rw /home/default
104+ && chmod -R g+rw /home/default \
105+ && mkdir -p /opt/ibm/links \
106+ && chown -R 1001:0 /opt/ibm/links \
107+ && chmod -R g+rw /opt/ibm/links
108+
109+ # Create second-level symlinks as non-root user
110+ USER 1001
111+
112+ RUN mkdir -p $WLP_OUTPUT_DIR/defaultServer \
113+ && ln -s $WLP_OUTPUT_DIR/defaultServer /opt/ibm/links/output \
114+ && ln -s /opt/ibm/wlp/usr/servers/defaultServer /opt/ibm/links/config \
115+ && mkdir -p /opt/ibm/links/config/configDropins/defaults \
116+ && mkdir -p /opt/ibm/links/config/configDropins/overrides
117+
118+ # Create first-level symlinks as root user
119+ USER 0
120+
121+ RUN mkdir /output \
122+ && chmod -t /output \
123+ && rm -rf /output \
124+ && ln -s /opt/ibm/links/output /output \
125+ && ln -s /opt/ibm/links/config /config \
126+ && chown -R 1001:0 /opt/ibm/links/output \
127+ && chmod -R g+rw /opt/ibm/links/output \
128+ && chown -R 1001:0 /opt/ibm/links/config \
129+ && chmod -R g+rw /opt/ibm/links/config \
130+ && chown -R 1001:0 /config \
131+ && chmod -R g+rw /config \
132+ && chown -R 1001:0 /output \
133+ && chmod -R g+rw /output
114134
115135# Create a new SCC layer
116136RUN if [ "$OPENJ9_SCC" = "true" ]; then populate_scc.sh; fi \
0 commit comments