try fixing user permissions in containers

This commit is contained in:
Adam 2022-10-22 20:24:27 +02:00
parent bb5e98f740
commit c9d21fa25a
4 changed files with 59 additions and 13 deletions

View file

@ -3,17 +3,28 @@
FROM eclipse-temurin:11-jdk-jammy FROM eclipse-temurin:11-jdk-jammy
ARG KAFKATORIO_VERSION ARG KAFKATORIO_VERSION
ARG APP_FILES="build/" ARG APP_FILES="build/"
ARG USER_ID=1000 ARG USER_NAME="container_user"
ARG USER_GID=1000 ARG USER_UID=1000
ARG USER_GID=$USER_ID
USER $USER_ID:$USER_GID
ENV SERVER_DATA_DIR="/app/data" \ ENV SERVER_DATA_DIR="/app/data" \
KAFKA_STREAMS_STATE_DIR="/app/state/kafka" KAFKA_STREAMS_STATE_DIR="/app/state/kafka"
VOLUME ${SERVER_DATA_DIR} \ VOLUME ${SERVER_DATA_DIR} \
${KAFKA_STREAMS_STATE_DIR} ${KAFKA_STREAMS_STATE_DIR}
COPY ${APP_FILES} /app/ COPY ${APP_FILES} /app/
RUN groupadd --gid $USER_GID $USERNAME \
&& useradd --uid $USER_UID --gid $USER_GID -m $USERNAME \
&& chown -R $USER_UID:$USER_GID /app/
USER $USER_ID:$USER_GID
ENTRYPOINT /app/bin/run ENTRYPOINT /app/bin/run

View file

@ -3,21 +3,33 @@
FROM eclipse-temurin:11-jdk-jammy FROM eclipse-temurin:11-jdk-jammy
ARG KAFKATORIO_VERSION ARG KAFKATORIO_VERSION
ARG APP_FILES="build/" ARG APP_FILES="build/"
ARG USER_ID=1000 ARG USER_NAME="container_user"
ARG USER_GID=1000 ARG USER_UID=1000
ARG USER_GID=$USER_ID
USER $USER_ID:$USER_GID
ENV SERVER_DATA_DIR="/app/data" \ ENV SERVER_DATA_DIR="/app/data" \
KAFKA_STREAMS_STATE_DIR="/app/state/kafka" \ KAFKA_STREAMS_STATE_DIR="/app/state/kafka" \
SOCKET_SERVER_HOST=0.0.0.0 \ SOCKET_SERVER_HOST=0.0.0.0 \
SOCKET_SERVER_PORT=9002 SOCKET_SERVER_PORT=9002
EXPOSE $SOCKET_SERVER_PORT EXPOSE $SOCKET_SERVER_PORT
VOLUME ${SERVER_DATA_DIR} \ VOLUME ${SERVER_DATA_DIR} \
${KAFKA_STREAMS_STATE_DIR} ${KAFKA_STREAMS_STATE_DIR}
COPY ${APP_FILES} /app/ COPY ${APP_FILES} /app/
RUN groupadd --gid $USER_GID $USERNAME \
&& useradd --uid $USER_UID --gid $USER_GID -m $USERNAME \
&& chown -R $USER_UID:$USER_GID /app/
USER $USER_ID:$USER_GID
ENTRYPOINT /app/bin/run ENTRYPOINT /app/bin/run

View file

@ -3,20 +3,32 @@
FROM eclipse-temurin:11-jdk-jammy FROM eclipse-temurin:11-jdk-jammy
ARG KAFKATORIO_VERSION ARG KAFKATORIO_VERSION
ARG APP_FILES="build/" ARG APP_FILES="build/"
ARG USER_ID=1000 ARG USER_NAME="container_user"
ARG USER_GID=1000 ARG USER_UID=1000
ARG USER_GID=$USER_ID
USER $USER_ID:$USER_GID
ENV SERVER_DATA_DIR="/app/data" \ ENV SERVER_DATA_DIR="/app/data" \
KAFKA_STREAMS_STATE_DIR="/app/state/kafka" \ KAFKA_STREAMS_STATE_DIR="/app/state/kafka" \
WEB_SERVER_PORT=80 WEB_SERVER_PORT=80
EXPOSE $WEB_SERVER_PORT EXPOSE $WEB_SERVER_PORT
VOLUME ${SERVER_DATA_DIR} \ VOLUME ${SERVER_DATA_DIR} \
${KAFKA_STREAMS_STATE_DIR} ${KAFKA_STREAMS_STATE_DIR}
COPY ${APP_FILES} /app/ COPY ${APP_FILES} /app/
RUN groupadd --gid $USER_GID $USERNAME \
&& useradd --uid $USER_UID --gid $USER_GID -m $USERNAME \
&& chown -R $USER_UID:$USER_GID /app/
USER $USER_ID:$USER_GID
ENTRYPOINT /app/bin/run ENTRYPOINT /app/bin/run

View file

@ -2,23 +2,34 @@
FROM eclipse-temurin:11-jdk-jammy FROM eclipse-temurin:11-jdk-jammy
ARG KAFKATORIO_VERSION ARG KAFKATORIO_VERSION
ARG APP_FILES="build/" ARG USER_NAME="container_user"
ARG USER_ID=1000 ARG USER_UID=1000
ARG USER_GID=1000 ARG USER_GID=$USER_ID
USER $USER_ID:$USER_GID
ENV SERVER_DATA_DIR="/app/data" \ ENV SERVER_DATA_DIR="/app/data" \
KAFKA_STREAMS_STATE_DIR="/app/state/kafka" \ KAFKA_STREAMS_STATE_DIR="/app/state/kafka" \
SERVER_PORT=8080 \ SERVER_PORT=8080 \
SOCKET_SERVER_PORT=9002 SOCKET_SERVER_PORT=9002
EXPOSE $SERVER_PORT \ EXPOSE $SERVER_PORT \
$SOCKET_SERVER_PORT $SOCKET_SERVER_PORT
VOLUME ${SERVER_DATA_DIR} \ VOLUME ${SERVER_DATA_DIR} \
${KAFKA_STREAMS_STATE_DIR} ${KAFKA_STREAMS_STATE_DIR}
COPY ${APP_FILES} /app/ COPY ${APP_FILES} /app/
RUN groupadd --gid $USER_GID $USERNAME \
&& useradd --uid $USER_UID --gid $USER_GID -m $USERNAME \
&& chown -R $USER_UID:$USER_GID /app/
USER $USER_ID:$USER_GID
ENTRYPOINT /app/bin/run ENTRYPOINT /app/bin/run