+# Creating the user for the app
+RUN groupadd -g 1000 appuser && \
+ useradd -u 1000 -g 1000 -d /app appuser && \
+ usermod -a -G keystone appuser && \
+ usermod -a -G adm appuser && \
+ chown -R appuser:appuser /app && \
+ chown root:keystone /etc/keystone && \
+ chmod 770 /etc/keystone && \
+ chown root:keystone /etc/ssl/certs && \
+ chmod 770 /etc/ssl/certs && \
+ chown root:keystone /etc/apache2/apache2.conf && \
+ chmod 664 /etc/apache2/apache2.conf && \
+ sed -i 's/Listen 80/Listen 8080/g' /etc/apache2/ports.conf && \
+ chown root:keystone /var/spool && \
+ chmod 775 /var/spool && \
+ chmod 770 /var/log/apache2 && \
+ chmod 660 /var/log/apache2/* && \
+ chmod 770 /var/log/keystone && \
+ chown root:keystone /var/run/apache2 && \
+ chmod 775 /var/run/apache2 && \
+ mkdir -p /etc/sudoers.d && \
+ echo "%appuser ALL= NOPASSWD: /sbin/service apache2 *" > /etc/sudoers.d/appuser
+
+USER appuser
+
+# database
+ENV DB_HOST keystone-db
+ENV DB_PORT 3306
+ENV ROOT_DB_USER root
+ENV ROOT_DB_PASSWORD admin
+ENV KEYSTONE_DB_PASSWORD admin
+# keystone
+ENV REGION_ID RegionOne
+ENV KEYSTONE_HOST keystone
+# admin user
+ENV ADMIN_USERNAME admin
+ENV ADMIN_PASSWORD admin
+ENV ADMIN_PROJECT admin
+# nbi service user
+ENV SERVICE_USERNAME nbi
+ENV SERVICE_PASSWORD nbi
+ENV SERVICE_PROJECT service
+# ldap
+# ENV LDAP_AUTHENTICATION_DOMAIN_NAME no default
+# ENV LDAP_URL ldap://localhost
+# ENV LDAP_BIND_USER no default
+# ENV LDAP_BIND_PASSWORD no default
+# ENV LDAP_CHASE_REFERRALS no default
+# ENV LDAP_PAGE_SIZE 0
+# ENV LDAP_USER_TREE_DN no default
+# ENV LDAP_USER_OBJECTCLASS inetOrgPerson
+# ENV LDAP_USER_ID_ATTRIBUTE cn
+# ENV LDAP_USER_NAME_ATTRIBUTE sn
+# ENV LDAP_USER_PASS_ATTRIBUTE userPassword
+# ENV LDAP_USER_FILTER no default
+# ENV LDAP_USER_ENABLED_ATTRIBUTE enabled
+# ENV LDAP_USER_ENABLED_MASK 0
+# ENV LDAP_USER_ENABLED_DEFAULT true
+# ENV LDAP_USER_ENABLED_INVERT false
+# ENV LDAP_GROUP_OBJECTCLASS groupOfNames
+# ENV LDAP_GROUP_TREE_DN no default
+# ENV LDAP_USE_STARTTLS false
+# ENV LDAP_TLS_CACERT_BASE64 no default
+# ENV LDAP_TLS_REQ_CERT demand
+
+ENTRYPOINT ["./start.sh"]