From 5e819ee1de07086fb7ace9392281bc9274f85d79 Mon Sep 17 00:00:00 2001 From: Tobias Florek Date: Thu, 8 Jul 2021 19:30:09 +0000 Subject: [PATCH] specify user in rootless container numerically (#16361) * specify user in rootless container numerically With kubernetes' PodSecurityPolicy set to runAsNonRoot it will not allow starting the container. The error message is ``` Error: container has runAsNonRoot and image has non-numeric user (git), cannot verify user is non-root ``` The `USER` directive has to be numerical for that to work. * mention the name of the uid/gid Co-authored-by: 6543 <6543@obermui.de> --- Dockerfile.rootless | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile.rootless b/Dockerfile.rootless index 70f654011..efdb3bb72 100644 --- a/Dockerfile.rootless +++ b/Dockerfile.rootless @@ -56,7 +56,7 @@ COPY docker/rootless / COPY --from=build-env --chown=root:root /go/src/code.gitea.io/gitea/gitea /usr/local/bin/gitea COPY --from=build-env --chown=root:root /go/src/code.gitea.io/gitea/environment-to-ini /usr/local/bin/environment-to-ini -USER git:git +USER 1000:1000 # git:git ENV GITEA_WORK_DIR /var/lib/gitea ENV GITEA_CUSTOM /var/lib/gitea/custom ENV GITEA_TEMP /tmp/gitea