Execution of docker run within Weblogic Image Tool is a problem in security aware pipeline

[zeitiger]

Hello,

I have encountered the issue that execution of Weblogic Image Tool is blocked by CetusGuard protected Docker build pipeline due to execution of docker run. In com.oracle.weblogic.imagetool.cli.menu.CommonOptions.copyOptionsFromImage, if you define --fromImage, it will run this image to recognize existing JAVA_HOME and ORALCE_HOME.

It would be great to get a parameter option to prevent docker run and provide JAVA_HOME and ORACLE_HOME definitions as parameter options instead, maybe like this.

• disableDockerRun
• javaHomeInImage
• oracleHomeInImage

[ddsharpe]

I think that should be possible. Only the docker run is blocked? Not the docker build?

[zeitiger]

Correct, only docker run is blocked for security reasons.

[ddsharpe]

Enhancement is available in main. Documentation is pending for --fromImageProperties. This feature will be available in the next release.