Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support running the container rootless #115

Open
vorburger opened this issue Nov 19, 2022 · 2 comments
Open

Support running the container rootless #115

vorburger opened this issue Nov 19, 2022 · 2 comments

Comments

@vorburger
Copy link
Contributor

I am exploring running the ghcr.io/filecoin-saturn/l1-node:main container in another container runtime environment (k8s) than on Docker via your run.sh and noticed the following error:

2022/11/19 23:42:19 [emerg] 29#29: chown("/usr/src/app/shared/nginx_cache", 101) failed (1: Operation not permitted)
nginx: [emerg] chown("/usr/src/app/shared/nginx_cache", 101) failed (1: Operation not permitted)

I suspect that this is because on (my) k8s the file permission on the /usr/src/app/shared/ volume is slightly different than on Docker?

I'm not sure you if this is a real problem or can just be ignored.

@vorburger
Copy link
Contributor Author

I'm not sure you if this is a real problem or can just be ignored.

This log message is a "real" critical (note emerg = Nginx "Emergency") problem which blocks orderly start-up.

#120 raised to make this easier to understand for future users.

I suspect that this is because on (my) k8s the file permission (...)

It's actually not really that, the reason was just that I tried to run it with more limited Linux capabilities than root, for a better security posture. This would be similar e.g. to "rootless" Docker (or Podman), where I suspect one woul also run int this error (not yet tested).

@vorburger vorburger changed the title nginx: [emerg] chown("/usr/src/app/shared/nginx_cache", 101) failed (1: Operation not permitted) Support running the container rootless Nov 23, 2022
@vorburger
Copy link
Contributor Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant