Skip to content

Commit

Permalink
Allow reading Elasticsearch certs in Wolfi image (#732)
Browse files Browse the repository at this point in the history
The config/certs directory of Elasticsearch is not readable by other
users and groups. This work in the public image, which uses the root
user, but the Wolfi image does not. Using the same user id fixes the
problem.
  • Loading branch information
pquentin authored Oct 9, 2024
1 parent 06b65e2 commit 5dabe9c
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions Dockerfile.wolfi
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,10 @@ WORKDIR /eland
ENV VIRTUAL_ENV=/eland/venv
ENV PATH="$VIRTUAL_ENV/bin:$PATH"

# Use the same `USER` instruction as Elasticsearch to make sure Eland can read
# a volume with Elasticsearch data in it. This is useful for --ca-cert.
USER 1000:0

COPY --from=builder /eland /eland

# The eland_import_hub_model script is intended to be executed by a shell,
Expand Down

0 comments on commit 5dabe9c

Please sign in to comment.