potiuk commented on issue #20776:
URL: https://github.com/apache/airflow/issues/20776#issuecomment-1009740911


   Thanks @ghislainp for reporting it - this will be fixed in #20238! 
   
   @fredthomsen:
   
   > The default user created by the entrypoint script is not suppose to have 
write access to the airflow user home directory. That home directory is created 
via the adduser command in the Dockerfile and has the standard home directory 
permissions.
   
   True. The thing is that we should indeed treat all the users in the image in 
the same way. Our image is Open-Shift compatible, which means that it allows to 
run the image as arbitraty user as long as it belongs to group 0  
(https://airflow.apache.org/docs/docker-stack/entrypoint.html#allowing-arbitrary-user-to-run-the-container).
 There was indeed a bug there that the home directory (unlike ~/.local) was not 
group-writeable. This allowed arbitrary user to install pip packages (by 
default PIP_USER="true" makes all the packages installed to ~/.local) but if 
the user wanted to store anything in Home dir, it was not (by default) possible.
   
   The PR #20238 fixes it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to