I find it worrying that the user has write access everywhere, tryign …

…out this.

Dockerfile

@@ -147,6 +147,9 @@ RUN echo Catalina base: ${CATALINA_BASE} && \
   (echo -e "vpro/tomcat git version=${CI_COMMIT_SHA}\t${CI_COMMIT_REF_NAME}\t${CI_COMMIT_TIMESTAMP}\t${CI_COMMIT_TITLE}") > /DOCKER.BUILD && \
   (echo -n "vpro/tomcat build time=" ; date -Iseconds) >> /DOCKER.BUILD
 
+
+RUN useradd tomcat
+
 # The onbuild commands to install the application when this image is overlaid
 
 ONBUILD ARG PROJECT_VERSION
@@ -205,3 +208,6 @@ ONBUILD RUN apt-get update && apt-get -y upgrade && \
   (echo "${NAME} version=${PROJECT_VERSION}") >> /DOCKER.BUILD && \
   (echo -e "${NAME} git version=${CI_COMMIT_SHA}\t${CI_COMMIT_REF_NAME}\t${CI_COMMIT_TIMESTAMP}\t${CI_COMMIT_TITLE}") >> /DOCKER.BUILD && \
   (echo -n "${NAME} build time=" ; date -Iseconds) >> /DOCKER.BUILD
+
+
+USER tomcat

Makefile

@@ -17,7 +17,7 @@ run:  ## Run the build image
 	docker run -i $(IMAGE)
 
 exec: ## Look around in the build image
-	docker run -it --entrypoint /bin/bash $(IMAGE)
+	docker run -it --entrypoint /bin/bash -v /data:/data $(IMAGE)
 
 exectest:
 	docker run -it --entrypoint /bin/bash vpro/test:latest