You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm trying to run SSP as a rootless podman container, and I'm running into permission issues in the entrypoint.sh script. It attempts to create a link from the user-provided configuration file to another location that is owned by root. If I use userns=keepid, which normally simplifies permission issues in the vast majority of containers, this causes an error because the link destination is owned by root: -rw-r--r-- 1 root root 18266 Oct 29 11:01 config.inc.php.orig
I was still having trouble when I started this ticket, but I eventually found a solution which is to use userns=keep-id --user=0:0. It's a pretty reasonable solution, but one that could be avoided by changing the practice used in the container. I decided to create the ticket anyways to help others who run into this issue.
There may be a couple ways of simplifying this in the container:
Change config loading logic to conditionally load the user-provided file, if it exists. This removes the need for the ln command entirely.
Change ownership and permission on the config.inc.php.orig file to allow non-root users to create the link.
The text was updated successfully, but these errors were encountered:
I'm trying to run SSP as a rootless podman container, and I'm running into permission issues in the
entrypoint.sh
script. It attempts to create a link from the user-provided configuration file to another location that is owned by root. If I useuserns=keepid
, which normally simplifies permission issues in the vast majority of containers, this causes an error because the link destination is owned by root:-rw-r--r-- 1 root root 18266 Oct 29 11:01 config.inc.php.orig
I was still having trouble when I started this ticket, but I eventually found a solution which is to use
userns=keep-id --user=0:0
. It's a pretty reasonable solution, but one that could be avoided by changing the practice used in the container. I decided to create the ticket anyways to help others who run into this issue.There may be a couple ways of simplifying this in the container:
ln
command entirely.config.inc.php.orig
file to allow non-root users to create the link.The text was updated successfully, but these errors were encountered: