Hi.

Regarding openshift policy for safely running images, it's recommended to
disable scc for unprivileged user. This may causes some issues while
reading from password database since EUID of the running user is generated
by openshift and can't be found inside the container:

bash-4.2$ pip install memcache
Traceback (most recent call last):
  File "/opt/rh/rh-python34/root/usr/bin/pip", line 7, in <module>
    from pip import main
  File
"/opt/rh/rh-python34/root/usr/lib/python3.4/site-packages/pip/__init__.py",
line 9, in <module>
    from pip.util import get_installed_distributions, get_prog
  File
"/opt/rh/rh-python34/root/usr/lib/python3.4/site-packages/pip/util.py",
line 16, in <module>
    from pip.locations import site_packages, running_under_virtualenv,
virtualenv_no_global
  File
"/opt/rh/rh-python34/root/usr/lib/python3.4/site-packages/pip/locations.py",
line 96, in <module>
    build_prefix = _get_build_prefix()
  File
"/opt/rh/rh-python34/root/usr/lib/python3.4/site-packages/pip/locations.py",
line 65, in _get_build_prefix
    __get_username())
  File
"/opt/rh/rh-python34/root/usr/lib/python3.4/site-packages/pip/locations.py",
line 60, in __get_username
    return pwd.getpwuid(os.geteuid()).pw_name
KeyError: 'getpwuid(): uid not found: 1000180000'

How can I circumvent this obstacle? Should I rebuild all sti scripts to
include this user into the image? There is any trick to allow passwd
readers to read from a mock?


Thanks,


*Mateus Caruccio*
Master of Puppets
+55 (51) 8298.0026
gtalk:


*[email protected] <[email protected]>twitter:
@MateusCaruccio <https://twitter.com/MateusCaruccio>*
This message and any attachment are solely for the intended
recipient and may contain confidential or privileged information
and it can not be forwarded or shared without permission.
Thank you!
_______________________________________________
dev mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev

Reply via email to