docker-compose with minimal PID namespace and non-root permissions (#2397)
* Feat: only share the erigon container PID namespace with rpcdaemon instead of the entire host PID namespace. * Feat: remove host UID:GUID mapping from erigon and rpcdaemon containers in favour of erigon user in Dockerfile. Adapted Makefile to pre-create mounted volumes to avoid permission issues at runtime. * Feat: docker volume directories should always be owned by erigon user(1000:1000) regardless of the user that invoked the make command. * Fix: don't chown here which breaks docker volume mounts. * Fix: remove ERIGON_HOME Makefile variable and simplify recipe.
Loading
Please register or sign in to comment