drop privileges to APP_USER earlier to ensure stdout/stderr have correct perms

Author: anarchivist

Dockerfile

@@ -108,9 +108,21 @@ RUN for app in vod live; \
 # Copy our scripts, configs, templates, etc. into the container
 COPY --chown=$APP_USER WowzaStreamingEngine /usr/local/WowzaStreamingEngine
 COPY --chown=$APP_USER log4j-templates /opt/app/log4j-templates
-COPY --chown=$APP_USER etc_templates /opt/app/etc_templates
+COPY --chown=$APP_USER supervisor_templates /opt/app/supervisor_templates
 COPY --chown=$APP_USER bin /opt/app/bin
 
+# create supervisord config files from templates
+RUN envsubst < \
+    supervisor_templates/supervisord.conf.tmpl > \
+    /etc/supervisor/supervisord.conf
+RUN envsubst < \
+    supervisor_templates/conf.d/WowzaStreamingEngine.conf.tmpl > \
+    /etc/supervisor/conf.d/WowzaStreamingEngine.conf
+RUN envsubst < \
+    supervisor_templates/conf.d/WowzaStreamingEngineManager.conf.tmpl > \
+    /etc/supervisor/conf.d/WowzaStreamingEngineManager.conf
+
+
 # =============================================================================
 # Additional Java libraries
 
@@ -151,6 +163,8 @@ RUN apt-get remove -y zip
 # are dropped by supervisord instead of setting the `USER` set in the
 # Dockerfile.
 
+USER $APP_USER
+
 # =============================================================================
 # Default command
 

bin/docker-entrypoint.sh

@@ -31,12 +31,6 @@ export WSE_MGR_USER=$WOWZA_MANAGER_USER
 export WSE_MGR_PASS=$WOWZA_MANAGER_PASSWORD
 export WSE_LIC=$WOWZA_LICENSE_KEY
 
-# use envsubst to transform templates into supervisord config files
-echo "Creating supervisord configuration files from templates..."
-envsubst < /opt/app/etc_templates/supervisor/supervisord.conf.tmpl > /etc/supervisor/supervisord.conf
-envsubst < /opt/app/etc_templates/supervisor/conf.d/WowzaStreamingEngine.conf.tmpl > /etc/supervisor/conf.d/WowzaStreamingEngine.conf
-envsubst < /opt/app/etc_templates/supervisor/conf.d/WowzaStreamingEngineManager.conf.tmpl > /etc/supervisor/conf.d/WowzaStreamingEngineManager.conf
-
 # ########################################
 # Start server and manager by handing off to Wowza's entrypoint
 

…or/conf.d/WowzaStreamingEngine.conf.tmpl …es/conf.d/WowzaStreamingEngine.conf.tmpletc_templates/supervisor/conf.d/WowzaStreamingEngine.conf.tmpl renamed to supervisor_templates/conf.d/WowzaStreamingEngine.conf.tmpl etc_templates/supervisor/conf.d/WowzaStreamingEngine.conf.tmpl renamed to supervisor_templates/conf.d/WowzaStreamingEngine.conf.tmpl

@@ -5,5 +5,7 @@ command=/usr/local/WowzaStreamingEngine/bin/startup.sh
 user=${APP_USER}
 autostart=true
 autorestart=true
-stdout_logfile=/usr/local/supervisor/supervisorStdOut.log
-stderr_logfile=/usr/local/supervisor/supervisorStdErr.log
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes = 0

….d/WowzaStreamingEngineManager.conf.tmpl ….d/WowzaStreamingEngineManager.conf.tmpletc_templates/supervisor/conf.d/WowzaStreamingEngineManager.conf.tmpl renamed to supervisor_templates/conf.d/WowzaStreamingEngineManager.conf.tmpl etc_templates/supervisor/conf.d/WowzaStreamingEngineManager.conf.tmpl renamed to supervisor_templates/conf.d/WowzaStreamingEngineManager.conf.tmpl

@@ -5,5 +5,7 @@ command=/usr/local/WowzaStreamingEngine/manager/bin/startmgr.sh
 user=${APP_USER}
 autostart=true
 autorestart=true
-stdout_logfile=/usr/local/supervisor/supervisorStdOut.log
-stderr_logfile=/usr/local/supervisor/supervisorStdErr.log
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes = 0