Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix permissions #9

Merged
merged 1 commit into from
Mar 2, 2019
Merged

Fix permissions #9

merged 1 commit into from
Mar 2, 2019

Conversation

unguiculus
Copy link
Contributor

@unguiculus unguiculus commented Feb 27, 2019

This is a follow-up PR for #7, since 3256bdf, unfortunately, did not fully fix the issue.

The example I supplied is not ideal. It works with your fix because it uses Busybox which doesn't have group 1000 so the user runs with gid=0. I added id to the script which prints the following:

uid=1000 gid=0(root) groups=0(root),1000

Now, when I use an image that actually has a user with uid=1000, gid=1000, such as jenkins/jenkins it doesn't work because the user does not belong to group 0 in this case:

uid=1000(jenkins) gid=1000(jenkins) groups=1000(jenkins)

This fixes the issue using 0777 as Minikube does.

@yasker
Copy link
Member

yasker commented Feb 27, 2019

@unguiculus I see.

0777 won't be very secure, but I cannot see a better solution for now since we don't have any information regarding what the permission should be in optswhen creating the volume.

Can you update the example as well? I will merge and release a new version after.

This is a follow-up PR for #7, since 3256bdf, unfortunately, did not fully fix the issue.

The example I supplied is not ideal. It works with your fix because it uses Busybox which doesn't have group 1000 so the user runs with gid=0. I added `id` to the script which prints the following:

`uid=1000 gid=0(root) groups=0(root),1000`

Now, when I use an image that actually has a user with uid=1000, gid=1000, such as `jenkins/jenkins` it doesn't work because the user does not belong to group 0 in this case:

`uid=1000 gid=0(root) groups=0(root),1000`

This fixes the issue using `0777` as Minikube does.
@yasker
Copy link
Member

yasker commented Mar 2, 2019

@unguiculus Sorry, didn't see your update sooner. Github still doesn't send notification for updated commit..

Merged, thanks.

yasker added a commit that referenced this pull request Mar 2, 2019
Thanks to Reinhard Nägele <[email protected]>, one additional PR has
been merged to correctly fix #7 .

See commit message and #9 for details
@yasker
Copy link
Member

yasker commented Mar 2, 2019

@unguiculus Local Path Provisioner v0.0.4 released.

@unguiculus unguiculus deleted the patch-1 branch March 2, 2019 17:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants