Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

run Docker containers as a metadig user #390

Open
jeanetteclark opened this issue Nov 2, 2023 · 1 comment
Open

run Docker containers as a metadig user #390

jeanetteclark opened this issue Nov 2, 2023 · 1 comment
Milestone

Comments

@jeanetteclark
Copy link
Collaborator

Right now they are all running as root - here is what metadig is doing

@jeanetteclark jeanetteclark added this to the 3.0 milestone Nov 2, 2023
@mbjones
Copy link
Member

mbjones commented Nov 2, 2023

Here's an example of setting a specific UID and GID to run as, so you can better control filesystem permissions.

https://github.com/howweirdistheweather/weather_app/blob/main/helm/Dockerfile#L9

This is hardcoded in the Dockerfile for hwitw, but it also could be a configurable property. Bitnami charts often run as UID 1001 and GID 0, and set all files as g+rwX so they are accessible to the user. If you need the UID to be configurable, maybe it could be determined at runtime via an ENV variable (which might work, but might also be problematic if someone tries to change it on a persistent volume that was previously set differently).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Ready
Development

No branches or pull requests

2 participants