Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Container - config.inc.php.orig Permission Issues #1022

Open
brooksvb opened this issue Dec 15, 2024 · 1 comment
Open

Container - config.inc.php.orig Permission Issues #1022

brooksvb opened this issue Dec 15, 2024 · 1 comment
Assignees
Labels
Milestone

Comments

@brooksvb
Copy link

I'm trying to run SSP as a rootless podman container, and I'm running into permission issues in the entrypoint.sh script. It attempts to create a link from the user-provided configuration file to another location that is owned by root. If I use userns=keepid, which normally simplifies permission issues in the vast majority of containers, this causes an error because the link destination is owned by root:
-rw-r--r-- 1 root root 18266 Oct 29 11:01 config.inc.php.orig

I was still having trouble when I started this ticket, but I eventually found a solution which is to use userns=keep-id --user=0:0. It's a pretty reasonable solution, but one that could be avoided by changing the practice used in the container. I decided to create the ticket anyways to help others who run into this issue.

There may be a couple ways of simplifying this in the container:

  1. Change config loading logic to conditionally load the user-provided file, if it exists. This removes the need for the ln command entirely.
  2. Change ownership and permission on the config.inc.php.orig file to allow non-root users to create the link.
@davidcoutadeur
Copy link

Thank you for the report, well' look at this for next release.

@davidcoutadeur davidcoutadeur self-assigned this Dec 17, 2024
@davidcoutadeur davidcoutadeur added this to the 1.7.2 milestone Dec 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants