Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure the RUN_AS ownership applies to the DB's named volume #2099

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Ensure the RUN_AS ownership applies to the DB's named volume #2099

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
27cc521
Ensure the RUN_AS ownership applies to the DB's named volume
mogul Oct 2, 2024
7a8f8a9
Use long form to avoid race condition
mogul Oct 3, 2024
e2a5a3a
Add comment to the first appearance of RUN_AS
mogul Oct 3, 2024
f9ad277
Merge branch 'main' into patch-1
mogul Oct 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,26 @@ services:
ports:
- "${SPIFFWORKFLOW_FRONTEND_PORT:-8001}:${SPIFFWORKFLOW_FRONTEND_PORT:-8001}/tcp"

# Ensure that the RUN_AS user is able to write to the named volume where the sqlite DB will be
# Solution via https://stackoverflow.com/a/73255981
match-volume-ownership:
image: alpine
restart: "no"
# Use RUN_AS if set, otherwise default to root (0:0)
entrypoint: |
/bin/sh -c "chown ${RUN_AS:-0:0} /app/db_volume"
volumes:
- spiffworkflow_backend_db:/app/db_volume:rw

spiffworkflow-backend:
container_name: spiffworkflow-backend
image: ghcr.io/sartography/spiffworkflow-backend:latest
# Enable setting the ownership of created files to match the local user:group. For example:
# RUN_AS="$(id -u):$(id -g)" docker compose up -d
user: ${RUN_AS:-0:0}
depends_on:
match-volume-ownership:
condition: service_completed_successfully
environment:
SPIFFWORKFLOW_BACKEND_ENV: "local_docker"
FLASK_DEBUG: "0"
Expand Down
Loading