Skip to content
This repository has been archived by the owner on Apr 25, 2023. It is now read-only.

Make athenapdf-service run as non-root user #193

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

derkoe
Copy link

@derkoe derkoe commented May 3, 2019

  • Xvfb needs the directory /tmp/.X11-unix/ to be owned by root
  • headless chrome needs a writeable HOME directory
  • enables to run the image for example with "-u 101010:0"
  • the server can be run on OpenShift and K8s clusters with SCC

@MrSaints
Copy link
Collaborator

MrSaints commented May 3, 2019

@djackson-saa if you're still interested, this might solve your problem.

 - Xvfb needs the directory /tmp/.X11-unix/ to be owned by root
 - headless chrome needs a writeable HOME directory
 - enables to run the image for example with "-u 101010:0"
 - the server can be run on OpenShift and K8s clusters with SCC
@derkoe derkoe force-pushed the docker-non-root branch from 2b43573 to fa5e36b Compare May 6, 2019 05:53
@djackson-saa
Copy link

Thanks... I will check it out soon.


COPY build/weaver /athenapdf-service/
WORKDIR /athenapdf-service/

ENV PATH /athenapdf-service/:$PATH
ENV PATH /athenapdf-service/:$PATH \
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

multi env need change to PATH=/athenapdf-service/:$PATH

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in current commit

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants