8000 bug: Fix UID/GID problem in a systematic way · Issue #666 · tensorchord/envd · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

bug: Fix UID/GID problem in a systematic way #666

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
VoVAllen opened this issue Jul 26, 2022 · 3 comments
Closed

bug: Fix UID/GID problem in a systematic way #666

VoVAllen opened this issue Jul 26, 2022 · 3 comments
Labels
priority/3-low 💙 type/bug 🐛
Milestone
First Release

Comments

@VoVAllen
Copy link
Member

Description

Possible solution:

  • Use GID=0 for envd user
  • Use root as the default user

Reference: https://github.com/boxboat/fixuid
@VoVAllen VoVAllen added this to the First Release milestone Jul 26, 2022
@gaocegege
Copy link
Member

I will try to fix this.

/assign @gaocegege

@gaocegege
Copy link
Member

https://docs.bitnami.com/tutorials/why-non-root-containers-are-important-for-security

We should not make envd to root user group by default.

@gaocegege
Copy link
Member

moby/moby#7198

I was thinking if we can mount the root-owned volume to the container, as the envd (UID 1000) owned volume. But it does not work. The mounted volume cannot update the UID/GID.

moby/moby#7198

@gaocegege gaocegege removed their assignment Aug 12, 2022
@kemingy kemingy mentioned this issue Aug 31, 2022
Merged
@kemingy kemingy mentioned this issue Sep 16, 2022
Closed
@gaocegege gaocegege moved this to Done in envd sprint board Nov 25, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
priority/3-low 💙 type/bug 🐛
Projects
No open projects
envd sprint board
Status: Done
Milestone
First Release
Development

No branches or pull requests
2 participants
@gaocegege @VoVAllen
0