I've incorporated all the changes I suggested. I kept tianon's ENTRYPOINT tip in mind as well. I looked at several other official repositories to try to implement it correctly.
I've noticed that many entrypoint scripts use a chown to fix possible UID/GID issues before starting the main service process. Since I've set the container to run as the aerospike user, that technique won't work. I think using a static random high number UID/GID is a good alternative so that the container user can be non-root by default.
This will resolve #7
I've incorporated all the changes I suggested. I kept tianon's ENTRYPOINT tip in mind as well. I looked at several other official repositories to try to implement it correctly.
I've noticed that many entrypoint scripts use a chown to fix possible UID/GID issues before starting the main service process. Since I've set the container to run as the aerospike user, that technique won't work. I think using a static random high number UID/GID is a good alternative so that the container user can be non-root by default.