Docker user daemon with id 1 causes permission issues with local

[DaveCLowe]

Request Type

Feature Request

Work Environment

Question	Answer
OS version (server)	RedHat
TheHive version / git hash	3.4.0
Package Type	Docker

Problem Description

You should create a user within the docker image with a high statically defined uid/gid so we can create local users with the same IDs to grant the container user read permissions to files such as application.conf when mounted within the container at runtime.

At present, we need to create a new docker image to work around the runtime container local volume mount permission denied errors.

Steps to Reproduce

1. Start a docker container with a local volume mount for application.conf to /etc/thehive/application.conf
2. Start a shell within the container
3. As the "daemon" user with uid 1, you won't be able to read the application.conf file

Possible Solutions

Option 1: Change the daemon uid from 1 to a high static number
Option 2: Create a new user instead of daemon with a high uid

Please check out the neat work in Grafana's dockerfile for suggestion:
https://github.com/grafana/grafana/blob/master/Dockerfile

Complementary information

Perhaps it's also best to build from a different base image than elasticsearch?

[DaveCLowe]

Would be happy to submit a PR for a dockerfile, but that doesn't exist and is generated only on build?
#1222

Suggest moving away from that approach to this.