arangodb-docker icon indicating copy to clipboard operation
arangodb-docker copied to clipboard

Folder Permission in Alpine images are not root group writeable

Open vbasem opened this issue 4 years ago • 2 comments

The folder permissions for /var/lib/arangodb3 /var/lib/arangodb3* are not being properly set to 775 as mentioned in the Dockerfile:

echo chgrp -R 0 /var/lib/arangodb3 /var/lib/arangodb3-apps && \
echo chmod -R 775 /var/lib/arangodb3 /var/lib/arangodb3-apps &

The echo is rendering the command ineffective. This causes environments that disallow root user to fail when starting the ID container which needs to write to those folders which only have read permission by default.

I fixed it locally by rebuilding the image by simply removing the echo in the 2 commands above.

Was the echo on purpose?

Basem Vaseghi [email protected], Daimler TSS GmbH, legal info/Impressum

vbasem avatar Oct 18 '21 13:10 vbasem

Hello @vbasem,

This was fixed in https://github.com/arangodb/arangodb-docker/commit/d46dfa818833436aa89907a045c803de84c7868a and soon will appear at https://hub.docker.com/_/arangodb?tab=description.

KVS85 avatar Nov 08 '21 20:11 KVS85

To make the directories root writeable on a image is not a good idea. Usually root it's prohibited (by psp) to run a image as root. As well, it's a bad practice to write to image filesystem as well!

trieder83 avatar Jul 08 '22 06:07 trieder83