-
Notifications
You must be signed in to change notification settings - Fork 85
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
No variables PUID and PGID #111
Comments
Thanks you are making a valid point. For the moment we are creating a new user (without root privileges) inside the container. https://github.com/kerberos-io/agent/blob/master/Dockerfile#L96-L99 We might need to change this to allow host user access. Will need to be researched and documented. Thank you for your insights! ;) |
Yes please add PUID and GID variables. I recently moved my agent docker container to openmediavault but I think it's failing to record events due to permissions problems and normally this is fixed by having the user/group ID configurable via variables (see also linuxserver's docker containers) |
Would this be sufficient (https://docs.linuxserver.io/general/understanding-puid-and-pgid). It mentions:
Would this work as well? https://docs.docker.com/engine/reference/run/#user Currently we create our own user within the agent, and set it as the user: https://github.com/kerberos-io/agent/blob/master/Dockerfile#L134 I believe this could be bypassed as follow:
|
@yllekz @neutralvibes any thoughts? |
Just came across this issue, for K8S if I set |
Seems as if agents are forced to run as '100:101' in container. Not nice. Would be nicer if what now appears to be a standard is used.
This will also allow for required user access outside the container without requiring root. Forgive me if there is already a way to do this.
The text was updated successfully, but these errors were encountered: