consolidation

Author: maltesander

hbase/Dockerfile

@@ -89,9 +89,10 @@ if [ "${DELETE_CACHES}" = "true" ] ; then
 fi
 
 # set correct groups
-chmod -R g=u /stackable
+chmod --recursive g=u /stackable
 EOF
 
+
 FROM stackable/image/java-devel AS opa-authorizer-builder
 
 ARG OPA_AUTHORIZER
@@ -124,9 +125,10 @@ if [ "${DELETE_CACHES}" = "true" ] ; then
 fi
 
 # set correct groups
-chmod -R g=u /stackable
+chmod --recursive g=u /stackable
 EOF
 
+
 FROM stackable/image/java-devel AS hbase-operator-tools-builder
 
 ARG HBASE_OPERATOR_TOOLS
@@ -145,7 +147,7 @@ ARG DELETE_CACHES="true"
 COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/bin/hbck2.env /stackable/bin/
 COPY --chown=${STACKABLE_USER_UID}:0 hbase/hbase-operator-tools/stackable/patches /stackable/patches
 COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/patches/apply_patches.sh /stackable/patches
-COPY --chown=${STACKABLE_USER_UID}:0 --chmod=755 hbase/stackable/bin/hbase-entrypoint.sh /stackable/bin/
+COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/bin/hbase-entrypoint.sh /stackable/bin/
 
 USER ${STACKABLE_USER_UID}
 WORKDIR /stackable
@@ -193,7 +195,7 @@ if [ "${DELETE_CACHES}" = "true" ] ; then
 fi
 
 # set correct groups
-chmod -R g=u /stackable
+chmod --recursive g=u /stackable
 EOF
 
 
@@ -227,9 +229,10 @@ chmod +x /stackable/bin/export-snapshot-to-s3
 rm /stackable/bin/export-snapshot-to-s3.env
 
 # set correct groups
-chmod -R g=u /stackable
+chmod --recursive g=u /stackable
 EOF
 
+
 FROM stackable/image/java-devel AS phoenix-builder
 
 ARG PRODUCT
@@ -290,7 +293,7 @@ if [ "${DELETE_CACHES}" = "true" ] ; then
 fi
 
 # set correct groups
-chmod -R g=u /stackable
+chmod --recursive g=u /stackable
 EOF
 
 
@@ -365,24 +368,45 @@ microdnf install \
 microdnf clean all
 rpm -qa --qf "%{NAME}-%{VERSION}-%{RELEASE}\n" | sort > /stackable/package_manifest.txt
 chown ${STACKABLE_USER_UID}:0 /stackable/package_manifest.txt
+chmod g=u /stackable/package_manifest.txt
 rm -rf /var/cache/yum
 
 ln --symbolic --logical --verbose "/stackable/hbase-${PRODUCT}" /stackable/hbase
-chown -h ${STACKABLE_USER_UID}:0 /stackable/hbase
+chown --no-dereference ${STACKABLE_USER_UID}:0 /stackable/hbase
+chmod g=u /stackable/hbase
 
 ln --symbolic --logical --verbose "/stackable/hbase-operator-tools-${HBASE_OPERATOR_TOOLS}" /stackable/hbase-operator-tools
-chown -h ${STACKABLE_USER_UID}:0 /stackable/hbase-operator-tools
+chown --no-dereference ${STACKABLE_USER_UID}:0 /stackable/hbase-operator-tools
+chmod g=u /stackable/hbase-operator-tools
 
 ln --symbolic --logical --verbose "/stackable/phoenix/phoenix-server-hbase-${HBASE_PROFILE}.jar" "/stackable/hbase/lib/phoenix-server-hbase-${HBASE_PROFILE}.jar"
-chown -h ${STACKABLE_USER_UID}:0 "/stackable/hbase/lib/phoenix-server-hbase-${HBASE_PROFILE}.jar"
+chown --no-dereference ${STACKABLE_USER_UID}:0 "/stackable/hbase/lib/phoenix-server-hbase-${HBASE_PROFILE}.jar"
+chmod g=u "/stackable/hbase/lib/phoenix-server-hbase-${HBASE_PROFILE}.jar"
+
+# fix missing permissions
+chmod g=u /stackable/async-profiler
+chmod g=u /stackable/bin
+chmod g=u /stackable/jmx
+chmod g=u /stackable/phoenix
+# the whole directory tree /stackable/hadoop/share/hadoop/tools/lib/ must be adapted
+find /stackable/hadoop -type d -exec chmod g=u {} +
 EOF
 
 # ----------------------------------------
-# Attention:
-# If you do any file based actions (copying / creating etc.) below this comment you
-# absolutely need to make sure that the correct permissions are applied!
-# chown ${STACKABLE_USER_UID}:0
+# Checks
+# This section is to run final checks to ensure the created final images
+# adhere to several minimal requirements like:
+# - check file permissions and ownerships
+# ----------------------------------------
+
+# Check that permissions and ownership in /stackable are set correctly
+# This will fail and stop the build if any mismatches are found.
+RUN <<EOF
+/bin/check-permissions-ownership.sh /stackable ${STACKABLE_USER_UID} 0
+EOF
+
 # ----------------------------------------
+# Attention: Do not perform any file based actions (copying/creating etc.) below this comment because the permissions would not be checked.
 
 USER ${STACKABLE_USER_UID}
 ENV HBASE_CONF_DIR=/stackable/hbase/conf