Makefile · d085bf9a7fd7b608d872e5a8d4817feb97df3f5c · a / Erigon

Forked from an inaccessible project.

3 years ago

docker-compose with minimal PID namespace and non-root permissions (#2397) · d085bf9a

Marius authored 3 years ago

* Feat: only share the erigon container PID namespace with rpcdaemon instead of the entire host PID namespace.

* Feat: remove host UID:GUID mapping from erigon and rpcdaemon containers in favour of erigon user in Dockerfile. Adapted Makefile to pre-create mounted volumes to avoid permission issues at runtime.

* Feat: docker volume directories should always be owned by erigon user(1000:1000) regardless of the user that invoked the make command.

* Fix: don't chown here which breaks docker volume mounts.

* Fix: remove ERIGON_HOME Makefile variable and simplify recipe.

Unverified

d085bf9a

History

docker-compose with minimal PID namespace and non-root permissions (#2397)

Marius authored 3 years ago

* Feat: only share the erigon container PID namespace with rpcdaemon instead of the entire host PID namespace.

* Feat: remove host UID:GUID mapping from erigon and rpcdaemon containers in favour of erigon user in Dockerfile. Adapted Makefile to pre-create mounted volumes to avoid permission issues at runtime.

* Feat: docker volume directories should always be owned by erigon user(1000:1000) regardless of the user that invoked the make command.

* Fix: don't chown here which breaks docker volume mounts.

* Fix: remove ERIGON_HOME Makefile variable and simplify recipe.

Code owners

Assign users and groups as approvers for specific file changes. Learn more.