Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[9.0.x] Docker usage may raise a permission denied #182

Closed
llaville opened this issue Feb 19, 2023 · 2 comments
Closed

[9.0.x] Docker usage may raise a permission denied #182

llaville opened this issue Feb 19, 2023 · 2 comments
Assignees
Labels

Comments

@llaville
Copy link
Collaborator

New Issue

Diagnose

Digest sha256:7e82b3078506c4cac55081d9c3ef19ec8e5b18f3d5da10dbc179a17a22d29e4b

Output of `docker inspect overtrue/phplint:latest` command
[
    {
        "Id": "sha256:0c573046f5b72aad60b2c96087cb4ef729f6f03a679a3258efd9766e0eaa1bb7",
        "RepoTags": [
            "overtrue/phplint:latest"
        ],
        "RepoDigests": [
            "overtrue/phplint@sha256:7e82b3078506c4cac55081d9c3ef19ec8e5b18f3d5da10dbc179a17a22d29e4b"
        ],
        "Parent": "",
        "Comment": "buildkit.dockerfile.v0",
        "Created": "2023-02-19T07:43:46.96562438Z",
        "Container": "",
        "ContainerConfig": {
            "Hostname": "",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": null,
            "Cmd": null,
            "Image": "",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": null,
            "Labels": null
        },
        "DockerVersion": "",
        "Author": "",
        "Config": {
            "Hostname": "",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "PHPIZE_DEPS=autoconf \t\tdpkg-dev dpkg \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkgconf \t\tre2c",
                "PHP_INI_DIR=/usr/local/etc/php",
                "PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
                "PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
                "PHP_LDFLAGS=-Wl,-O1 -pie",
                "GPG_KEYS=39B641343D8C104B2B146DC3F9C39DC0B9698544 E60913E4DF209907D8E30D96659A97C9CF2A795A 1198C0117593497A5EC5C199286AF1F9897469DC",
                "PHP_VERSION=8.2.3",
                "PHP_URL=https://www.php.net/distributions/php-8.2.3.tar.xz",
                "PHP_ASC_URL=https://www.php.net/distributions/php-8.2.3.tar.xz.asc",
                "PHP_SHA256=b9b566686e351125d67568a33291650eb8dfa26614d205d70d82e6e92613d457"
            ],
            "Cmd": null,
            "Image": "",
            "Volumes": null,
            "WorkingDir": "/workdir",
            "Entrypoint": [
                "/entrypoint.sh"
            ],
            "OnBuild": null,
            "Labels": null
        },
        "Architecture": "amd64",
        "Os": "linux",
        "Size": 97151662,
        "VirtualSize": 97151662,
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/4467dde7b2af02f966039abe0ade5c35ccedffc8fe980159505cfc3d9be580b6/diff:/var/lib/docker/overlay2/4556ff0fd67ca0b6297c1212e2993721de9a47d29a998830eaf8cdd4700c9c3e/diff:/var/lib/docker/overlay2/6ac051fdc8816a0e4d0de4c66c04da20f83b28e367c222883995996fb2aca073/diff:/var/lib/docker/overlay2/e6bac2e76b806df555cad304ee507d9f81d291e1d618d0e817f1a7af95a10e63/diff:/var/lib/docker/overlay2/a470fb78c31f400fc744977777609d4c13cd734dc34d63a8b98847a14e187272/diff:/var/lib/docker/overlay2/9e35d092617cea99895450fa573859b0cb38e6d55dc73955afec8f784c9aec80/diff:/var/lib/docker/overlay2/8e01785c67b60c8fd44c1394998c945c8f14a87ae4605e09e2084ab651c18bf6/diff:/var/lib/docker/overlay2/d21969d59815ad87f9382ac553e809464279ddcc2badb2f3e794bc991b011d22/diff:/var/lib/docker/overlay2/e29805149048604f3deeb4636640e4ee80c89560e03ffc75bf5940e645dcfd06/diff:/var/lib/docker/overlay2/c9036e4c80efc8b50feb40bcfab55ab5ea3b59ec2ccda5d6528462746e5d017e/diff:/var/lib/docker/overlay2/8d0ff394ab45c687b21ddabf6a0fe34e9e7afd341873e4e55439c0b6dd29b62e/diff:/var/lib/docker/overlay2/ef41c651af8bfedc5004e03221be08e89c1d9084e058b54876c9de59a66de353/diff:/var/lib/docker/overlay2/173993b8ec13f53c9e36d3ae1de0dc2436791d549e2f89c5f2fbe4d7dcefabea/diff",
                "MergedDir": "/var/lib/docker/overlay2/315e18828f5b859f16a9bafb39ae6afaab07facd94bb7d1201b48424bb6c996e/merged",
                "UpperDir": "/var/lib/docker/overlay2/315e18828f5b859f16a9bafb39ae6afaab07facd94bb7d1201b48424bb6c996e/diff",
                "WorkDir": "/var/lib/docker/overlay2/315e18828f5b859f16a9bafb39ae6afaab07facd94bb7d1201b48424bb6c996e/work"
            },
            "Name": "overlay2"
        },
        "RootFS": {
            "Type": "layers",
            "Layers": [
                "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39",
                "sha256:77c59b472c8702d20a8f53f58c04b7cf924269c857860e77ecab3a7aec3a2803",
                "sha256:db44c43654189fecca3864a4ab6d80b94f9ab8f52495f03e6096cd7d9c801dfd",
                "sha256:439ab5b1c6c808fd73a29653774032f20a18eb1bf15bb7001ba1449ff8aa3bcb",
                "sha256:ba1ad8405b986007ecd5b25a4f7cbc47775a7a142fbc6c22456a09547de11ac1",
                "sha256:ff8b98f296449d95d546c8a38a77a73492794d604ca4b37e0230f6aa9469bdbe",
                "sha256:fbccf4daf58c5c0b8ad9c54044a8cfbbc71a78d429c30ef6e39116d06b507b12",
                "sha256:a4ee5d3c8cf1a54159383fd3d54aed927155820a1c7c9ea02f7a0b4566661ed0",
                "sha256:b5eb3203e02ac33ac6f68e138988da7a956b28d0deae0cf18919ae0eb70136cc",
                "sha256:8a55dccb3711c7c45e1f53319496bc412aaeb6e3b70e7a92d0ac1d79e8573553",
                "sha256:ecc08dd5cf4c8cc30c7af9184c34d560c90a9b4dafe9445df36e48c47ef533a3",
                "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
                "sha256:79e351c651f14249363ace2ffabec7462f8e750c1ff8723a4a69a9c701b4652b",
                "sha256:bbeafc4f28750f5b6cfd4fb4019bdf1b35c163c01057b74e279ad3729ea0b8b2"
            ]
        },
        "Metadata": {
            "LastTagTime": "0001-01-01T00:00:00Z"
        }
    }
]

Summary

Permission denied when running container with --user option (as recommended in documentation)

Expected behaviour

No auth error

Actual behaviour

sh: /root/.composer/vendor/bin/phplint: Permission denied

Additional Information

When running docker without --user option (root mode), all goes fine, except that we cannot delete cache if your user account is not in root group.

@llaville llaville added the bug label Feb 19, 2023
@llaville llaville self-assigned this Feb 19, 2023
llaville added a commit that referenced this issue Feb 19, 2023
@llaville
Copy link
Collaborator Author

This issue was fixed in the context of Docker image usage only.
We need to fix the custom PHPLint action that reuse the dockerfile, but as official GitHub doc said, we cannot have a USER directive. So an additional fix will come before closing this report.

@llaville
Copy link
Collaborator Author

FYI: this issue was fixed and will be closed because a solution to issue #184 was found (keeping docker image in non-root mode)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant