This is an automated email from the ASF dual-hosted git repository.
nddipiazza pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/main by this push:
new 0eac3d3ec6 TIKA-4703: Fix tika-grpc container permissions for plugin
directory (#2792)
0eac3d3ec6 is described below
commit 0eac3d3ec6cfc36ceb4dfa41a01f3ac7cfdc8bb1
Author: Nicholas DiPiazza <[email protected]>
AuthorDate: Mon Apr 27 16:14:07 2026 +0000
TIKA-4703: Fix tika-grpc container permissions for plugin directory (#2792)
pf4j creates temp directories alongside plugin zips when unzipping
(e.g. /tika/plugins/tika-pipes-google-drive-4.0.0-SNAPSHOT.tmp.uuid).
The COPY instructions run as root, leaving /tika owned by root, so the
non-root container user (35002:35002) could not write temp dirs on startup.
Fix: chown -R the entire /tika tree to the container user before the USER
switch, so pf4j can unzip plugins at runtime.
Co-authored-by: Copilot <[email protected]>
---
tika-grpc/docker-build/Dockerfile | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/tika-grpc/docker-build/Dockerfile
b/tika-grpc/docker-build/Dockerfile
index ec472047a8..ac28edbf2d 100644
--- a/tika-grpc/docker-build/Dockerfile
+++ b/tika-grpc/docker-build/Dockerfile
@@ -49,7 +49,8 @@ RUN set -eux \
&& apt-get clean -y \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
-RUN chmod +x "/tika/bin/start-tika-grpc.sh"
+RUN chmod +x "/tika/bin/start-tika-grpc.sh" \
+ && chown -R ${UID_GID} /tika
USER $UID_GID
