Conversation
|
Nice, thanks for cleaning this up @wohali |
|
@wohali: Hello, I am a bit confused by this commit/PR. Are we setting all files under /opt/couchdb as owned by the running process (couchdb)? I feel we should get binaries, etc, to be owned by root. Can you point me in the right direction to understand why this was necessary? Thanks! |
|
If the data and config files aren't owned by |
|
Understood, but the commands in the Dockerfile and docker-entrypoint.sh are setting all files under /opt/couchdb to be owned by the couchdb user -that can't be right. I think we should only set ownership on /opt/couchdb/data, logs, etc... Otherwise the running process has permissions to write over the binaries. Shall we fix this? |
See #132 - this is the revised version.
Already +1 by @kocolosk .