Skip to content

run marimo and init containers as the same user#9

Open
bittrance wants to merge 2 commits intomarimo-team:mainfrom
bittrance:run-as-user
Open

run marimo and init containers as the same user#9
bittrance wants to merge 2 commits intomarimo-team:mainfrom
bittrance:run-as-user

Conversation

@bittrance
Copy link
Copy Markdown
Contributor

The current default setup will have git-clone produce a worktree owned by root while marimo is running as uid 1000, which means that the user cannot edit it via the UI. This PR sets the default runAsUser for the marimo and all init containers to 1000 and allows overriding the value.

@dmadisetti
Copy link
Copy Markdown
Collaborator

A bit of concern this will break fuse, but stricter permissioning is ideal! Thanks! Will play around with this

We just assume that user 1000 is the correct default user; you can
always override the user if you provide a custom image.
The risk of misspells leading to an incorrectly passing test is generally small.
@bittrance
Copy link
Copy Markdown
Contributor Author

@dmadisetti Hm, fuse 🤔 . Also, I learned yesterday that fsGroup is only available at pod level, that you may want to coordinate with. Assuming we merge #10 you can work around all of these issues, but I'm not sure this is actually the best way to address this issue? Additionally, this PR does not touch sidecars, which is relevant because of #12. I will give this change a little more thought.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants