move check-permissions-ownership.sh to stackable-base image /bin

Author: maltesander

nifi/Dockerfile

@@ -100,7 +100,6 @@ COPY --chown=${STACKABLE_USER_UID}:0 --from=nifi-builder /stackable/stackable-bc
 COPY --chown=${STACKABLE_USER_UID}:0 nifi/stackable/bin /stackable/bin
 COPY --chown=${STACKABLE_USER_UID}:0 nifi/licenses /licenses
 COPY --chown=${STACKABLE_USER_UID}:0 nifi/python /stackable/python
-COPY --chown=${STACKABLE_USER_UID}:0 shared/checks/check-permissions-ownership /tmp/check-permissions-ownership
 
 RUN <<EOF
 microdnf update
@@ -141,8 +140,7 @@ EOF
 # Check that permissions and ownership in /stackable are set correctly
 # This will fail and stop the build if any mismatches are found.
 RUN <<EOF
-/tmp/check-permissions-ownership /stackable ${STACKABLE_USER_UID} 0
-rm /tmp/check-permissions-ownership
+/bin/check-permissions-ownership.sh /stackable ${STACKABLE_USER_UID} 0
 EOF
 
 # ----------------------------------------

shared/checks/check-permissions-ownership renamed to shared/checks/check-permissions-ownership.sh

@@ -11,8 +11,8 @@
 #
 # Usage
 #
-# ./check-permissions-ownership <directory> <uid> <gid>
-# ./check-permissions-ownership /stackable ${STACKABLE_USER_UID} 0
+# ./check-permissions-ownership.sh <directory> <uid> <gid>
+# ./check-permissions-ownership.sh /stackable ${STACKABLE_USER_UID} 0
 #
 
 if [[ $# -ne 3 ]]; then

stackable-base/Dockerfile

@@ -204,6 +204,10 @@ COPY --from=config-utils --chown=${STACKABLE_USER_UID}:0 /config-utils/config-ut
 # Debug tool that logs generic system information.
 COPY --from=containerdebug --chown=${STACKABLE_USER_UID}:0 /containerdebug/target/release/containerdebug /stackable/containerdebug
 
+# **check-permissions-ownership.sh**
+# Bash script to check proper permissions and ownership requirements in the final Stackable images
+COPY --chown=${STACKABLE_USER_UID}:0 shared/checks/check-permissions-ownership.sh /bin/check-permissions-ownership.sh
+
 ENV PATH="${PATH}:/stackable"
 
 # These labels have mostly been superceded by the OpenContainer spec annotations below but it doesn't hurt to include them