Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Running in Docker creates root-owned files #7

Closed
MrHedmad opened this issue Nov 29, 2023 · 3 comments
Closed

Running in Docker creates root-owned files #7

MrHedmad opened this issue Nov 29, 2023 · 3 comments
Labels
feat New feature or request RFC Request For Comments

Comments

@MrHedmad
Copy link
Owner

This is the same issue that always comes up when you use docker. Since the docker daemon runs as root, all the files that it mounts are root-owned. This means that you have to run chown on them all the time.

It would be nice if kerblam could avoid this:

  • If we ask every time for your sudo password, we could chown the files ourselves, although it's dangerous if you chown random stuff (security risk)? It would be better to track which files are made and chown those alone, but it's a lot of work.
  • If we manage to run the docker container as a user (e.g. see here and here) we could ignore all of this, but it never worked in the past for me.
  • We can just ignore this issue but it's a pain in the ass.
@MrHedmad MrHedmad added the feat New feature or request label Nov 29, 2023
@MrHedmad
Copy link
Owner Author

This can be avoided by switching to the podman executable instead of docker.
I still have to test out podman, however, but my initial experience is very good.
I'll tag this as RFC.

@MrHedmad MrHedmad added the RFC Request For Comments label Dec 12, 2023
@MrHedmad
Copy link
Owner Author

Just to make the link, the "switch to podman" issue is #37

@MrHedmad
Copy link
Owner Author

With #37 being resolved, this is no longer relevant. Making root-owned files is just a side-effect of using docker. With #57 you can swap to Podman and not have this problem anymore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feat New feature or request RFC Request For Comments
Projects
None yet
Development

No branches or pull requests

1 participant