Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Don't require root for Docker #2178

Closed
schmichael opened this issue Jan 10, 2017 · 4 comments
Closed

Don't require root for Docker #2178

schmichael opened this issue Jan 10, 2017 · 4 comments
Assignees
@schmichael
Labels
stage/needs-investigation theme/client theme/driver/docker

Comments

@schmichael
Copy link
Member

As of #2132 root is required for all drivers to use the mount syscall.

Investigate removing that requirement. Hopefully it's as easy as not bothering to bind mount the alloc dir inside Docker task dirs.
@schmichael schmichael added this to the v0.5.3 milestone Jan 10, 2017
@schmichael schmichael self-assigned this Jan 10, 2017
@kaskavalci kaskavalci mentioned this issue Jan 11, 2017
Closed
@schmichael schmichael mentioned this issue Jan 11, 2017
Merged
schmichael added a commit that referenced this issue Jan 13, 2017
@schmichael
Stop trying to use mount for image based drivers
0785109 
Fixes #2178 and allows using Docker and other image based drivers even
when nomad is run as a non-root user.

`client/allocdir` tests can be run as a non-root user to ensure this
behavior and tests that rely on root or non-root users properly detect
their effective user and skip instead of fail.
@schmichael schmichael mentioned this issue Jan 13, 2017
Merged
@nugend
Copy link

nugend commented Jan 17, 2017

Shouldn't raw_exec also be excluded from requiring mount privilege?

@schmichael
Copy link
Member Author

@nugend You're correct! Fixed in this PR: #2216

@nugend
Copy link

nugend commented Jan 18, 2017

whew thanks. Thought I was going to lose the ability to use Nomad! 😨

@tgross tgross modified the milestones: near-term, unscheduled Jan 9, 2020
@wirat112535 wirat112535 mentioned this issue Jan 4, 2021
Merged
@dposton80 dposton80 mentioned this issue Feb 19, 2021
Open
@github-actions
Copy link

I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@schmichael schmichael

Labels
stage/needs-investigation theme/client theme/driver/docker
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@nugend @schmichael @tgross