Re: docker permissions on websites node

2020-04-16 Thread Udi Meiri
Thanks! That makes sense, and a welcome change to limit root access. On Thu, Apr 16, 2020 at 2:46 PM Chris Lambertus wrote: > Specifically, docker on the websites node (and ONLY the websites node) now > uses userns-remap to the jenkins UID so you no longer need to pass a -u > 910:910 parameter

Re: docker permissions on websites node

2020-04-16 Thread Chris Lambertus
Specifically, docker on the websites node (and ONLY the websites node) now uses userns-remap to the jenkins UID so you no longer need to pass a -u 910:910 parameter to 'docker run’. Unfortunately, the nature of userns-remap means that if you DO specify -u 910:910, things fail in a weird way. Sor

Re: docker permissions on websites node

2020-04-16 Thread Udi Meiri
Hi, Could you share what changes were made? Beam is having issues since we use bind mounts to write output to the host. Setting UID:GID on the image gives permission errors in the container when accessing the mount (can't write). Not setting it causes files to be created with the wrong (root:root