Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Container will not be able to run properly non-privileged #1091

Open
samip5 opened this issue Feb 16, 2024 · 1 comment
Open

[BUG] Container will not be able to run properly non-privileged #1091

samip5 opened this issue Feb 16, 2024 · 1 comment

Comments

@samip5
Copy link

samip5 commented Feb 16, 2024

Describe the bug

Currently the container will fail to start if it's not running privileged, due to the entrypoint's setup permissions. It needs a way to skip it, and preferably without gosu.

To Reproduce
Steps to reproduce the behavior:

  1. Run container as unprivileged on Kubernetes
  2. See that it's unable to run chown due to that nor use gosu as it requires root.
  3. Container unable to start due to operation not permitted errors

Expected behavior
I would expect it to work without issue, as it's running as 1000:1000, but that doesn't seem enough.

Screenshots
If applicable, add screenshots to help explain your problem.

Environment

  • Docker tag: latest@sha256:2f943d584711cb07c3535b518939fabb2ab90fdd7452d9a9938cd05378468ed9
  • Running on bare-metal k3s Kubernetes, using containerd

Additional context

[entrypoint] setup permission, this may take a while
chown: changing ownership of '.': Operation not permitted
chown: changing ownership of './users': Operation not permitted
chown: changing ownership of './appdata': Operation not permitted
chown: changing ownership of './audio': Operation not permitted
chown: changing ownership of './subscriptions': Operation not permitted
chown: changing ownership of './video': Operation not permitted
WARNING! Could not change directory ownership. If you manage permissions externally this is fine, otherwise you may experience issues when downloading or deleting videos.
error: failed switching to "1000:1000": operation not permitted
@samip5 samip5 changed the title [BUG] Container will not be able to run non-privileged [BUG] Container will not be able to run properly non-privileged Feb 16, 2024
@ahatdude
Copy link

Just checked this and can confirm I'm having the same error.
I agree, this would be nice to be able to fix so that the container can run unprivileged.

Cheers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants