Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

run with quarkus user (read-write access) #4470

Merged
merged 3 commits into from
Oct 13, 2019
Merged

run with quarkus user (read-write access) #4470

merged 3 commits into from
Oct 13, 2019

Conversation

haraldatbmw
Copy link
Contributor

In OpenShift it is not allowed to run the image with the root user. Therefor OpenShift creates a read-only user. The JTA implementation used by Quarkus needs write access (see #2702). So an exception is thrown if running without a custom user.

To overcome this problem I created a quarkus user with read and write access to the /deployments directory.

@geoand
Copy link
Contributor

geoand commented Oct 9, 2019

Thanks for this @haraldatbmw!

It looks good to me, @cescoffier WDYT?

@cescoffier
Copy link
Member

2 questions:

  • what about using 1001 as user?
  • should we do the same for the native docker file?

@haraldatbmw
Copy link
Contributor Author

2 questions:

  • what about using 1001 as user?

I changed it to 1001. The OpenShift documentation recommends this too.

  • should we do the same for the native docker file?

Maybe, this depends on the base docker image of the native docker file.
This is a different one to the jvm base image. I have not tried the native image.

@aloubyansky aloubyansky added this to the 0.25.0 milestone Oct 10, 2019
@aloubyansky
Copy link
Member

@cescoffier do we want to clarify whether the native image one needs the same before merging this or check later?

@aloubyansky aloubyansky merged commit b4bacf5 into quarkusio:master Oct 13, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants