[389-users] Re: Running dscontainer as a non-root user

> On 12 Jan 2022, at 20:55, Steve F <steve.falzon@outlook.com> wrote:
>
> Awesome!
>
> In regards to starting the dscontainer service as a non root user, do you have any guidance?
>
> I tried running dscontainer as a non root user in my Dockerfile, but it basicially instantly fails initializing the instance, as it can't write to some directories.
>
> e.g.
> sed: couldn't open temporary file /usr/lib/python3.6/site-packages/lib389/sedoCUEr6:
> Permission denied

Uhhhhh ... 389 shouldn't be writing to anything in /usr.

We only attempt to open and write to /data, which we assume is a container volume you have provided and configured correct permissions of. Beside that any writes to /usr are not because of 389 :S

Could you share your dockerfile so we can see what's going on?

--
Sincerely,

William Brown

Senior Software Engineer, Identity and Access Management
SUSE Labs, Australia
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure