Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Folder Permission in Alpine images are not root group writeable #103

Open
vbasem opened this issue Oct 18, 2021 · 2 comments · Fixed by docker-library/official-images#11257
Assignees
Labels

Comments

@vbasem
Copy link

vbasem commented Oct 18, 2021

The folder permissions for /var/lib/arangodb3 /var/lib/arangodb3* are not being properly set to 775 as mentioned in the Dockerfile:

echo chgrp -R 0 /var/lib/arangodb3 /var/lib/arangodb3-apps && \
echo chmod -R 775 /var/lib/arangodb3 /var/lib/arangodb3-apps &

The echo is rendering the command ineffective. This causes environments that disallow root user to fail when starting the ID container which needs to write to those folders which only have read permission by default.

I fixed it locally by rebuilding the image by simply removing the echo in the 2 commands above.

Was the echo on purpose?

Basem Vaseghi [email protected], Daimler TSS GmbH, legal info/Impressum

@KVS85
Copy link
Contributor

KVS85 commented Nov 8, 2021

Hello @vbasem,

This was fixed in d46dfa8 and soon will appear at https://hub.docker.com/_/arangodb?tab=description.

@KVS85 KVS85 self-assigned this Nov 8, 2021
@KVS85 KVS85 added the bug label Nov 8, 2021
@trieder83
Copy link

To make the directories root writeable on a image is not a good idea. Usually root it's prohibited (by psp) to run a image as root.
As well, it's a bad practice to write to image filesystem as well!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants