How to specify a user to run the garden container?

[cloudfoundry]

How to specify a user to run the garden container?

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this. You can view the current status of your issue at: https://www.pivotaltracker.com/story/show/89843986.

[onsi]

Hi @HelloLin - our goal is to eventually support Docker images without the need for any modification. The largest remaining gap is around support for users and groups -- our goal is to honor the Docker USER directive and create whatever user is specified in the Dockerfile that generated the Docker image. That should resolve all your issues simultaneously.

However, we have a number of higher priority items at this point but will try to address this as soon as we can.

For now, your best bet is to open up the permissions on your container file system to allow an arbitrary user to successfully launch the application (for example, you may need to change the permissions on the destination file that your script attempts to write to).

@onsi thank you for your answer. in fact, i find there is a struct define for specify the user when start the container, but default set to vcap or root. so i solve it by adding a script in "/var/vcap/packages/garden-linux/skeleton/setup.sh"

if [ -d "$rootfs_path/mydir/" ]; then
chroot $rootfs_path chown -R vcap:vcap /mydir
fi

in this way i can write to this dir, but, is this a good way to solve this question?,if mydir is big enough, it will take me a long time.

is diego will support to push a dockerfile to create a app in the feature?
the most important question is when the community will publish the release which eventually support Docker images?
thank you very much.

[onsi]

We want to implement user support comprehensively and correctly. Your script gets you past the current barrier but is not a long-term solution.

Diego currently supports pushing dockerfiles to create applications. There are issues around users (as I mentioned) but apart from that you can tell cloud controller you want a docker-based application today. The CF diego plugin (installation instructions here) has subcommands for pushing docker applications. You do need to enable diego-docker support in CC (it's turned off by default).

At this point we don't recommend running Docker applications in multi-tenant environments.

thank you for your answer.