Container security optimizations: arbitrary UID

[jennydaman]

Container security best practice is to allow container to run as an arbitrary (underprvileged) user. On some OpenShift deployments, it is obligatory to run containers this way.

We need to figure out how to run CUBE as an underprivileged user, which will require us to change its Dockerfile. We can also consider using Red Hat UBI, see #492

ChRIS_ultron_backEnd/Dockerfile

Line 43 in ce549dd

ARG UID=1001

This will affect how manage.py collectstatic works, which should probably be part of the build step.

ChRIS_ultron_backEnd/docker-entrypoint.sh

Line 12 in ce549dd

python manage.py collectstatic --noinput

• support arbitrary container UID
• do manage.py collectstatic during container build