-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Start eclipse/che-server docker image as root by default #3297
Conversation
What I need to rebuild to test? |
@skabashnyuk here are the steps:
and then launch cli |
@@ -121,10 +121,6 @@ init() { | |||
export CHE_WORKSPACE_STORAGE_CREATE_FOLDERS=false | |||
fi | |||
|
|||
# Ensure that the user "user" has permissions for CHE_HOME and CHE_DATA | |||
sudo chown -R user:user ${CHE_HOME} | |||
sudo chown -R user:user ${CHE_DATA} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@benoitf I think that these may be needed for the workspaces (that are still run as user user
)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@l0rd issue is that user 'user' may have another uid so it doesn't work as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@l0rd also I think workspaces only need access to /projects which is done there
https://github.com/eclipse/che/blob/5fbaf3d9ac45344b5596742b27d9335652d3d0ca/wsmaster/che-core-api-agent/src/main/resources/agents/scripts/org.eclipse.che.ws-agent.script.sh#L38
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@benoitf that makes sense 👍
What about agents and other software that you want to install outside of /projects? |
agents need to have sudo access so they have root access to do what they want. ? |
yep - got it. |
Build success. https://ci.codenvycorp.com/job/che-pullrequests-build/1236/ |
@skabashnyuk do you have tested ? |
What does this PR do?
Start eclipse/che-server docker image as root by default
What issues does this PR fix or reference?
#3276
Previous behavior
User user had to be in docker group but with a specific gid which is not always the case
New behavior
Start che server as root user by default
Use root user by default to start che-server
another PR is about specifying how to run che-server with a custom uid/gid
#3265
Change-Id: Ib2635dc9b8364b92caa768dc8e4de0603cbcf14f
Signed-off-by: Florent BENOIT fbenoit@codenvy.com