From a837dbc6b1a87a97beebb98cd742499c55494542 Mon Sep 17 00:00:00 2001 From: Reynold Morel Date: Wed, 8 Jan 2025 20:31:04 -0400 Subject: [PATCH 1/3] Fixing Docker permission issues --- Dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 420be6c5f8..fe448c6327 100644 --- a/Dockerfile +++ b/Dockerfile @@ -23,7 +23,10 @@ FROM eclipse-temurin:17-jre@sha256:38e0afc86a10bf4cadbf1586fb617b3a9a4d09c9a0be8 LABEL org.opencontainers.image.authors="ops@rootstocklabs.com" RUN useradd -ms /sbin/nologin -d /var/lib/rsk rsk -USER rsk + +RUN mkdir -p /var/lib/rsk/.rsk && \ + chown -R rsk:rsk /var/lib/rsk && \ + chmod -R 755 /var/lib/rsk/.rsk WORKDIR /var/lib/rsk COPY --from=build --chown=rsk:rsk /home/rsk/rsk.jar ./ From 858686ab29edfb3848745e48f751ecf3c1dc6f04 Mon Sep 17 00:00:00 2001 From: Reynold Morel Date: Fri, 17 Jan 2025 10:00:10 -0400 Subject: [PATCH 2/3] Adding ubuntu USER --- Dockerfile | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index fe448c6327..f16a13e86b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,10 +22,13 @@ RUN gpg --keyserver https://secchannel.rsk.co/SUPPORT.asc --recv-keys 1DC9157991 FROM eclipse-temurin:17-jre@sha256:38e0afc86a10bf4cadbf1586fb617b3a9a4d09c9a0be882e29ada4ed0895fc84 LABEL org.opencontainers.image.authors="ops@rootstocklabs.com" -RUN useradd -ms /sbin/nologin -d /var/lib/rsk rsk +RUN mkdir -p /var/lib/rsk && \ + chown -R 1000:1000 /var/lib/rsk + +USER ubuntu RUN mkdir -p /var/lib/rsk/.rsk && \ - chown -R rsk:rsk /var/lib/rsk && \ + chown -R ubuntu:ubuntu /var/lib/rsk && \ chmod -R 755 /var/lib/rsk/.rsk WORKDIR /var/lib/rsk From b3c54f4ac63e008b525f39ce29f604f6a6f21f87 Mon Sep 17 00:00:00 2001 From: Reynold Morel Date: Fri, 17 Jan 2025 11:06:49 -0400 Subject: [PATCH 3/3] setting the user with UID 1000 --- Dockerfile | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index f16a13e86b..88ef558992 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,14 +22,8 @@ RUN gpg --keyserver https://secchannel.rsk.co/SUPPORT.asc --recv-keys 1DC9157991 FROM eclipse-temurin:17-jre@sha256:38e0afc86a10bf4cadbf1586fb617b3a9a4d09c9a0be882e29ada4ed0895fc84 LABEL org.opencontainers.image.authors="ops@rootstocklabs.com" -RUN mkdir -p /var/lib/rsk && \ - chown -R 1000:1000 /var/lib/rsk - -USER ubuntu - -RUN mkdir -p /var/lib/rsk/.rsk && \ - chown -R ubuntu:ubuntu /var/lib/rsk && \ - chmod -R 755 /var/lib/rsk/.rsk +RUN useradd -ms /sbin/nologin -d /var/lib/rsk -o -u 1000 rsk +USER rsk WORKDIR /var/lib/rsk COPY --from=build --chown=rsk:rsk /home/rsk/rsk.jar ./