Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run docker-s3fs-client as non root user #49

Open
donovat opened this issue Oct 13, 2023 · 0 comments
Open

Run docker-s3fs-client as non root user #49

donovat opened this issue Oct 13, 2023 · 0 comments

Comments

@donovat
Copy link

donovat commented Oct 13, 2023

I agree with another user, thank you for providing (and maintaing!) this docker image.
I am currently testing using the image on an Red Hat OpenShift cluster. This is to by pass the requirement to have the s3fs code installed directly on the cluster.
One of the main security objectives is to run the containers with the OpenShift Cluster as a non root user. I understand that it can be set if required, although a lot of admin staff do get upset. Thus trying to run with either a random or per-defined UID/GID.
Normally with storage you can get a way with just using a GID of '0'.
However, in this case a lot of the commands in the docker-entrypoint.sh require root permission to execute.

Any Chance we could get extra flags or recommendations on how to run the image as a non root user.
ps. You can test by adding a USER setting at the end of the current docker file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant