Hi Henryk

yes that's what I meant. :-) It may be possible to get what you want by
running the container with root user. But by doing so you will give the
keys of the node as long as user namespaces are not supported by
Kubernetes/OpenShift. This is work in progress. Sorry, I am not aware of
another way to achieve what you want.

Regards,

Frédéric

On Tue, Jan 10, 2017 at 12:50 PM, Henryk Konsek <[email protected]> wrote:

> Hi Frederic,
>
> You mean something like...
>
> FROM myimage
> USER root
> RUN chgrp -R 0 /foo
> RUN chmod -R g+rw /foo
> RUN find /foo -type d -exec chmod g+x {} + RUN
>
> Am I right?
>
> So yeah, this approach works, but I was wondering if I can do something
> without creating new image. Something like:
>
> oc new-app myimage --screw-that-filesystem-write-limits=true
>
> Thanks!
>
> wt., 10 sty 2017 o 10:33 użytkownik Frederic Giloux <[email protected]>
> napisał:
>
>> Hi Henryk
>>
>> if I understand you properly the easiest way is to create an additional
>> layer to your image with a Dockerfile. In this Dockerfile, from will point
>> to your original image, you can then switch to root user, do a chmod +w to
>> the directory you want to access (or all of them) and switch back to the
>> image user.
>> I hope this helps.
>>
>> Regards,
>>
>> Frédéric
>>
>>
>> On Tue, Jan 10, 2017 at 10:19 AM, Henryk Konsek <[email protected]>
>> wrote:
>>
>> Actually I don't need to access to host file system. Only container's
>> file system. But I need write privileges to the whole container's file
>> system :)
>>
>> wt., 10 sty 2017 o 10:00 użytkownik Maciej Szulik <[email protected]>
>> napisał:
>>
>> You're looking for hostPath [1], but for that you either need privileged
>> SCC
>> or edit restricted one to allow hostDirVolumePlugin [2].
>>
>> [1] http://kubernetes.io/docs/user-guide/volumes/#hostpath
>> [2] https://docs.openshift.org/latest/admin_guide/manage_scc.
>> html#use-the-hostpath-volume-plugin
>>
>> On Tue, Jan 10, 2017 at 9:53 AM, Henryk Konsek <[email protected]>
>> wrote:
>>
>> Hi,
>>
>> Is it possibile to easily deploy container into OpenShift 3 and grant
>> this container write privileges to the whole file system?
>>
>> I know that I should be using volumes for this purpose, but I'm trying to
>> understand what options do we have when we need to run Docker images that
>> are not OS-friendly.
>>
>> Thanks!
>> --
>> Henryk Konsek
>> https://linkedin.com/in/hekonsek
>>
>>
>> --
>> Henryk Konsek
>> https://linkedin.com/in/hekonsek
>>
>> _______________________________________________
>> users mailing list
>> [email protected]
>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>
>>
>>
>>
>> --
>> *Frédéric Giloux*
>> Senior Middleware Consultant
>>
>> Red Hat GmbH
>> MesseTurm, Friedrich-Ebert-Anlage 49, 60308 Frankfurt am Main
>>
>> Mobile: +49 (0) 174 1724661 <callto:00491741724661>
>> E-Mail: [email protected], http://www.redhat.de/
>>
>> Delivering value year after year
>> Red Hat ranks # 1 in value among software vendors
>> http://www.redhat.com/promo/vendor/
>>
>> Freedom...Courage...Commitment...Accountability
>> ________________________________________________________________________
>> Red Hat GmbH, http://www.de.redhat.com/ Sitz: Grasbrunn,
>> Handelsregister: Amtsgericht München, HRB 153243
>> Geschäftsführer: Paul Argiry, Charles Cachera, Michael Cunningham,
>> Michael O'Neill
>>
> --
> Henryk Konsek
> https://linkedin.com/in/hekonsek
>



-- 
*Frédéric Giloux*
Senior Middleware Consultant

Red Hat GmbH
MesseTurm, Friedrich-Ebert-Anlage 49, 60308 Frankfurt am Main

Mobile: +49 (0) 174 1724661 <callto:00491741724661>
E-Mail: [email protected], http://www.redhat.de/

Delivering value year after year
Red Hat ranks # 1 in value among software vendors
http://www.redhat.com/promo/vendor/

Freedom...Courage...Commitment...Accountability
________________________________________________________________________
Red Hat GmbH, http://www.de.redhat.com/ Sitz: Grasbrunn,
Handelsregister: Amtsgericht München, HRB 153243
Geschäftsführer: Paul Argiry, Charles Cachera, Michael Cunningham, Michael
O'Neill
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to