[GitHub] [beam] pavel-avilov commented on a change in pull request #16842: [BEAM-13932][Playground] Container's user privileges

[GitBox <gi...@apache.org>]

pavel-avilov commented on a change in pull request #16842:
URL: https://github.com/apache/beam/pull/16842#discussion_r805811134



##########
File path: playground/backend/containers/go/Dockerfile
##########
@@ -76,9 +76,11 @@ RUN sh /proxy.sh
 # Create a user group `appgroup` and a user `appuser`
 RUN groupadd --gid 20000 appgroup \
   && useradd --uid 20000 --gid appgroup --shell /bin/bash --create-home appuser
-# Chown all the files to the app user.
-RUN chown -R appuser:appgroup /opt/playground/backend/ && chown -R appuser:appgroup /opt/playground/prepared_folder/ \
-  && chmod +x /entrypoint.sh
+
+RUN mkdir -p /opt/playground/backend/executable_files/

Review comment:
       And in other cases too.

##########
File path: playground/backend/containers/go/Dockerfile
##########
@@ -76,9 +76,11 @@ RUN sh /proxy.sh
 # Create a user group `appgroup` and a user `appuser`
 RUN groupadd --gid 20000 appgroup \
   && useradd --uid 20000 --gid appgroup --shell /bin/bash --create-home appuser
-# Chown all the files to the app user.
-RUN chown -R appuser:appgroup /opt/playground/backend/ && chown -R appuser:appgroup /opt/playground/prepared_folder/ \
-  && chmod +x /entrypoint.sh
+
+RUN mkdir -p /opt/playground/backend/executable_files/

Review comment:
       Can we change the path to `PREPARED_MOD_DIR` env




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org