tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rémy Maucherat <r...@apache.org>
Subject Re: [tomcat] branch master updated: may sure the arbitrarily assigned user ID of openshift can deploy a war file.
Date Mon, 25 Nov 2019 13:50:58 GMT
On Mon, Nov 25, 2019 at 2:46 PM Konstantin Kolinko <knst.kolinko@gmail.com>
wrote:

> пн, 25 нояб. 2019 г. в 15:24, <jfclere@apache.org>:
> >
> > This is an automated email from the ASF dual-hosted git repository.
> >
> > jfclere pushed a commit to branch master
> > in repository https://gitbox.apache.org/repos/asf/tomcat.git
> >
> >
> > The following commit(s) were added to refs/heads/master by this push:
> >      new a42b94a  may sure the arbitrarily assigned user ID of openshift
> can deploy a war file.
> > a42b94a is described below
> >
> > --- a/res/tomcat-maven/Dockerfile
> > +++ b/res/tomcat-maven/Dockerfile
> > @@ -23,6 +23,7 @@ RUN mkdir -m 777 -p /deployments
> >  ADD target/tomcat-maven-1.0.jar /deployments/app.jar
> >  ADD conf /deployments/conf
> >  ADD webapps /deployments/webapps
> > +RUN chmod 777 /deployments/webapps
>
> World-writable? Any other way to solve the issue?
>

Why does it matter ? It has to be writable by Tomcat and it is the only
process that will be running, so it's already world writable.
Note: it worked fine in Docker without it, so these container platforms
differences are new to me.

Rémy


>
> The following document [1] (found by Googling):
> tells to change directories ownership to group 0 (root) and make the
> files writable by that group.
> --
> RUN chgrp -R 0 /some/directory && \
>     chmod -R g=u /some/directory
> ---
> (Set owning group id to be 0, recursively (-R).
> Set group permissions recursively (-R) to be a copy (=) of the user's
> permissions.)
>
> [1]
> https://docs.openshift.com/container-platform/3.11/creating_images/guidelines.html#use-uid
> "OpenShift > 3.11 > Creating Images > Guidelines"
> section "Support Arbitrary User IDs"
>
> Best regards,
> Konstantin Kolinko
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>

Mime
View raw message