Beam Enrich: volume mount permissions in containers

[jrluis]

Currently Snowplow containers run as snowplow user.

When mounting a volume, it gets mounted as root, this makes impossible to access files from the program that is running as snowplow user.

The use case for this was on a gcp container, we tried to pass the service account file to the container using a volume, so the program running there could do the authentication and connect to gcp.

Example:

docker run --rm -v /root:/cfg -e GOOGLE_APPLICATION_CREDENTIALS='/cfg/sp-loader.json' snowplow-docker-registry.bintray.io/snowplow/snowplow-bigquery-mutator:0.1.0-rc13 listen --resolver=$RESOLVER --config=$CONFIG --verbose

This seems to be an old issue yet to have a proper solution moby/moby#2259

[jrluis]

Interesting link on this issue https://denibertovic.com/posts/handling-permissions-with-docker-volumes/

[chuwy]

Changed title as it seems only Beam Enrich now is affected?

[chuwy]

So, basically what we need to do is to copy our entrypoint approach from snowplow-docker https://github.com/snowplow/snowplow-docker/blob/develop/iglu-server/0.4.0/docker-entrypoint.sh

[peel]

Moved to: snowplow/beam-enrich#27