You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is one of a number of issues that we sidestep by running as root. (Note that the file in question, /etc/profile.d/prompt:kube-ps1.sh, is not a file in our repo, it is installed at build time from the jonmosco/kube-ps1 project.)
Geodesic is big, complex, and designed to be run with the internal user as root. This is one of only several dozen known issues with trying to run Geodesic as a non-root user, and we have not seen enough benefits from running as non-root to justify the effort of adapting Geodesic to run that way. (See #710 for more details.) It seems a more efficient path is to instead simply mitigate any issues caused by running as root, and we continue to work in that direction. Now that Docker supports rootless mode, the security implications of running as root from within the container should be minimal.
Describe the Bug
The permissions for
/etc/profile.d/prompt:kube-ps1.sh
as very restrictive. This impacts #594.Steps to Reproduce
Steps to reproduce the behavior:
docker run -it --rm cloudposse/geodesic:latest-debian --login
Expected Behavior
All scripts should have similar permissions and not be restricted to just root
Environment (please complete the following information):
Anything that will help us triage the bug will help. Here are some ideas:
The text was updated successfully, but these errors were encountered: