Skip to content

Commit

Permalink
rootless -> root container because of Litestream permissions issues
Browse files Browse the repository at this point in the history
I have no idea why, but Litestream sets a replicated file's
permissions to 600 [0], which makes it impossible to access
from a rootless container, if the file is being exposed through
a volume.

[0] https://github.com/benbjohnson/litestream/blob/5be467a478adcffc5b3999b9503cc676c2bf09f1/internal/internal.go#L62
  • Loading branch information
cmelone committed Apr 24, 2024
1 parent d845768 commit d39d691
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ COPY requirements.txt /requirements.txt
RUN /venv/bin/pip install --disable-pip-version-check -r /requirements.txt

# Copy the virtualenv into a distroless image
FROM gcr.io/distroless/python3-debian12:nonroot
FROM gcr.io/distroless/python3-debian12:latest
COPY --from=build /venv /venv
COPY ./gantry /app/gantry
COPY ./db /db
Expand Down

0 comments on commit d39d691

Please sign in to comment.