From 95eaba0b14d2617c43ca933d7c89a1d9f862e177 Mon Sep 17 00:00:00 2001 From: Stefaan Lippens Date: Wed, 27 Sep 2023 20:58:17 +0200 Subject: [PATCH] Issue #74 Dockerfile: attempt to fix permissions through user groups --- Dockerfile | 8 ++------ src/openeo_aggregator/about.py | 2 +- 2 files changed, 3 insertions(+), 7 deletions(-) diff --git a/Dockerfile b/Dockerfile index caa0ad38..81a6681c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -24,13 +24,9 @@ RUN echo "[global]" >> $PIP_CONF && \ cat $PIP_CONF -RUN useradd --create-home openeo - -# Directory for output logs -RUN mkdir -p /var/log/openeo -RUN chown openeo:openeo /var/log/openeo - # Build and run as non-root (see https://pythonspeed.com/articles/root-capabilities-docker-security/) +# Put user in necessary groups for desired runtime permissions (631600014=eodata, 631600010=vito) +RUN useradd --create-home --gid 631600014 --groups 631600010 openeo WORKDIR /home/openeo USER openeo diff --git a/src/openeo_aggregator/about.py b/src/openeo_aggregator/about.py index 4a202039..f516ac3e 100644 --- a/src/openeo_aggregator/about.py +++ b/src/openeo_aggregator/about.py @@ -1 +1 @@ -__version__ = "0.10.7a1" +__version__ = "0.10.8a1"