@@ -120,15 +120,20 @@ services:
120
120
- DIRACX_SERVICE_AUTH_TOKEN_KEY="file:///signing-key/rs256.key"
121
121
volumes :
122
122
- diracx-key-store:/signing-key/
123
+ # As the diracx images don't run as root we need to change the permissions of the /cs_store/ directory as well
124
+ - diracx-cs-store:/cs_store/
123
125
# We need to allow everybody to read the private keys
124
126
# Because the users are different between the DIRAC and DiracX containers
125
127
entrypoint : |
126
- bash -c "ssh-keygen -P '' -trsa -b4096 -mPEM -f/signing-key/rs256.key && chmod o+r /signing-key/rs256.*"
128
+ bash -xc "ssh-keygen -P '' -trsa -b4096 -mPEM -f/signing-key/rs256.key && chmod o+r /signing-key/rs256.* && chmod -R o=u /cs_store "
127
129
pull_policy : always
128
130
129
131
diracx-init-cs :
130
- image : ghcr.io/diracgrid/diracx/server
132
+ image : ghcr.io/diracgrid/diracx/client:dev
131
133
container_name : diracx-init-cs
134
+ depends_on :
135
+ diracx-init-key :
136
+ condition : service_completed_successfully # Let the init container set the permission on /cs_store/
132
137
environment :
133
138
- DIRACX_CONFIG_BACKEND_URL=git+file:///cs_store/initialRepo
134
139
- DIRACX_SERVICE_AUTH_TOKEN_KEY=file:///signing-key/rs256.key
@@ -140,7 +145,7 @@ services:
140
145
pull_policy : always
141
146
142
147
diracx-init-db :
143
- image : ghcr.io/diracgrid/diracx/server
148
+ image : ghcr.io/diracgrid/diracx/services:dev
144
149
container_name : diracx-init-db
145
150
depends_on :
146
151
mysql :
@@ -152,7 +157,7 @@ services:
152
157
pull_policy : always
153
158
154
159
diracx :
155
- image : ghcr.io/diracgrid/diracx/server
160
+ image : ghcr.io/diracgrid/diracx/services:dev
156
161
container_name : diracx
157
162
environment :
158
163
- DIRACX_CONFIG_BACKEND_URL=git+file:///cs_store/initialRepo
@@ -175,6 +180,8 @@ services:
175
180
volumes :
176
181
- diracx-cs-store:/cs_store/
177
182
- diracx-key-store:/signing-key/
183
+ entrypoint : |
184
+ /entrypoint.sh bash -xc 'uvicorn --factory diracx.routers:create_app'
178
185
179
186
healthcheck :
180
187
test : ["CMD", "/entrypoint.sh", "curl", "-f", "http://localhost:8000/.well-known/openid-configuration"]
0 commit comments