Skip to content

Conversation

@dkoshkin
Copy link
Contributor

@dkoshkin dkoshkin commented Oct 29, 2024

What problem does this PR solve?:
User 65532 is the default UID in distroless based images, but in Alpine it's a different user and group.

Which issue(s) this PR fixes:
Fixes #

How Has This Been Tested?:

Special notes for your reviewer:

@dkoshkin dkoshkin force-pushed the dkoshkin/fix-help-repository-securityContext branch from cc6cfba to ebb512e Compare October 29, 2024 15:07
@github-actions github-actions bot added fix and removed fix labels Oct 29, 2024
@dkoshkin
Copy link
Contributor Author

This is the guest user in the Alpine image

➜  ~ docker run -it alpine:latest
/ # users
/bin/sh: users: not found
/ # getent passwd
root:x:0:0:root:/root:/bin/sh
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/mail:/sbin/nologin
news:x:9:13:news:/usr/lib/news:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucppublic:/sbin/nologin
cron:x:16:16:cron:/var/spool/cron:/sbin/nologin
ftp:x:21:21::/var/lib/ftp:/sbin/nologin
sshd:x:22:22:sshd:/dev/null:/sbin/nologin
games:x:35:35:games:/usr/games:/sbin/nologin
ntp:x:123:123:NTP:/var/empty:/sbin/nologin
guest:x:405:100:guest:/dev/null:/sbin/nologin
nobody:x:65534:65534:nobody:/:/sbin/nologin
docker run -it -u 405  alpine:latest
/ $ whoami
guest
/ $ id
uid=405(guest) gid=100(users) groups=100(users)

@dkoshkin
Copy link
Contributor Author

Maybe we actually want the nobody user?

@dkoshkin dkoshkin force-pushed the dkoshkin/fix-help-repository-securityContext branch from ebb512e to 5eaa1db Compare October 29, 2024 19:12
@dkoshkin dkoshkin merged commit 86f0228 into main Oct 29, 2024
20 checks passed
@dkoshkin dkoshkin deleted the dkoshkin/fix-help-repository-securityContext branch October 29, 2024 20:18
@dkoshkin dkoshkin mentioned this pull request Oct 29, 2024
dkoshkin added a commit that referenced this pull request Oct 29, 2024
🤖 I have created a release *beep* *boop*
---


## 0.21.0 (2024-10-29)

<!-- Release notes generated using configuration in .github/release.yaml
at main -->

## What's Changed
### Exciting New Features 🎉
* feat: update Nutanix CSI to 3.1.0 by @dkoshkin in
#956
### Fixes 🔧
* fix: bundle correct arch for the mindthegap binary by @dkoshkin in
#954
* fix: use correct securityContext for Alpine based helm-repository Pod
by @dkoshkin in
#955


**Full Changelog**:
v0.20.0...v0.21.0

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants