Skip to content

fix: allow non-0 GID process to access and execute #814

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix: allow non-0 GID process to access and execute #814

wants to merge 1 commit into from

Conversation

@ymartin59
Copy link

@ymartin59 ymartin59 commented Oct 23, 2025 •
edited
Loading

When running container from a docker compose using a service account (for instance UID=1000 and GID=1000), execution fails with

Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "/opt/sonarqube/docker/entrypoint.sh": stat /opt/sonarqube/docker/entrypoint.sh: permission denied: unknown

Exerpt of docker compose:

  sonarqube:
    image: docker.io/library/sonarqube:
    user: "1000:0"
    hostname: sonarqube
    container_name: sonarqube
    read_only: true
    depends_on:
      db:
        condition: service_healthy
      traefik:
        condition: service_started
    environment:
      SONARQUBE_UID: 1000
      SONARQUBE_GID: 1000

Not tested but I am convinced this same issue prevents execution "as is" in Kubernetes context.

Thank you in advance for your help,
Yves

@carminevassallo carminevassallo self-requested a review October 27, 2025 09:53
@carminevassallo carminevassallo self-assigned this Oct 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@carminevassallo carminevassallo Awaiting requested review from carminevassallo

At least 1 approving review is required to merge this pull request.

Assignees

@carminevassallo carminevassallo

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ymartin59 @carminevassallo