Skip to content

Commit dca0cdd

Browse files
Merge pull request #24 from ecordell/root-downstream
fix(dockerfile): user needs enough access to read from the filesystem
2 parents b9768b1 + a10c752 commit dca0cdd

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

Dockerfile

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,16 +25,24 @@ RUN mkdir -p /go/src/github.com/grpc-ecosystem && \
2525

2626
FROM openshift/origin-base
2727

28+
RUN mkdir /registry
29+
WORKDIR /registry
30+
2831
COPY --from=builder /go/src/github.com/operator-framework/operator-registry/bin/initializer /bin/initializer
2932
COPY --from=builder /go/src/github.com/operator-framework/operator-registry/bin/registry-server /bin/registry-server
3033
COPY --from=builder /go/src/github.com/operator-framework/operator-registry/bin/configmap-server /bin/configmap-server
3134
COPY --from=builder /go/bin/grpc_health_probe /bin/grpc_health_probe
3235

36+
RUN chgrp -R 0 /registry && \
37+
chgrp -R 0 /dev && \
38+
chmod -R g+rwx /registry && \
39+
chmod -R g+rwx /dev
40+
3341
# This image doesn't need to run as root user
3442
USER 1001
3543

3644
EXPOSE 50051
3745

3846
LABEL io.k8s.display-name="OpenShift Operator Registry" \
39-
io.k8s.description="This is a component of OpenShift Operator Lifecycle Manager and is the base for operator catalog API containers." \
40-
maintainer="Odin Team <[email protected]>"
47+
io.k8s.description="This is a component of OpenShift Operator Lifecycle Manager and is the base for operator catalog API containers." \
48+
maintainer="Odin Team <[email protected]>"

0 commit comments

Comments
 (0)