Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permission denied deploying nginx on openshift #458

Open
rkhandha opened this issue Jul 31, 2023 · 1 comment
Open

Permission denied deploying nginx on openshift #458

rkhandha opened this issue Jul 31, 2023 · 1 comment

Comments

@rkhandha
Copy link

rkhandha commented Jul 31, 2023

I am deploying the geonded nginx, using image docker.io/geonode/nginx:3.3.x. I get permission denied on /geonode-certificates as this docker/nginx/docker-entrypoint.sh script creates directory, to resolve this I created customized dockerfile added
RUN mkdir -p /geonode-certificates
RUN chmod g+rwx -R /geonode-certificates.

After this change I still get permission denied on /certificate_symlink

    ln -sf "/geonode-certificates/autoissued" /certificate_symlink

Please note in Openshift we cannot run containers as root.

Any help is appreciated.

@rkhandha
Copy link
Author

rkhandha commented Aug 9, 2023

Any update on this? I have tried different options, continue to get same issue. Additional information

I am trying to deploy docker.io/geonode/nginx:3.3.x.
This image has docker-entrypoint.sh generstes certificates in directory : /geonode-certificates/autoissued
then it tries to ln -sf "/geonode-certificates/autoissued" /certificate_symlink.

Below is my volume and volume-mount configuration
volume-mount:

  • name: certificates-volume
    mountPath: /geonode-certificates
    volumes:
  • name: certificates-volume
    emptyDir: {}

I am getting ln: /certificate_symlink: Permission denied.

How can I solve this without changing docker-entrypoint.sh. Also I am running this as nonroot user.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant