Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix the /kaniko directory permissions in container #2009

Merged
merged 2 commits into from
Jun 27, 2022
Merged

Fix the /kaniko directory permissions in container #2009

merged 2 commits into from
Jun 27, 2022

Commits on Mar 22, 2022

  1. Fix the /kaniko directory permissions in container 

    Create /kaniko directory with world permission to allow the creation of
sub directories by any user when the executor is run as non root. This
can lower the security but shouldn't have any impact in a container.

The tar unpack is the only way I found to have a directory with specific
permission as the image is created from "scratch" which doesn't have any
tool to change the permission otherwise.

Fixes GoogleContainerTools#1363
    @claudex
    claudex committed Mar 22, 2022
    Configuration menu
    Copy the full SHA
    30a1fd7 View commit details
    Browse the repository at this point in the history

  2. Avoid blackbox tar file creation 

    Use the Makefile to create the tar file use to create kaniko directory
in scratch container. This avoid having a "blackbox" binary file with
the empty directory.
    @claudex
    claudex committed Mar 22, 2022
    Configuration menu
    Copy the full SHA
    ac0326a View commit details
    Browse the repository at this point in the history