Browse Source

Give docker user write permissions to required files/directories

Dominik Sander 7 years ago
parent
commit
ed4f9a1f50
2 changed files with 6 additions and 3 deletions
  1. 3 1
      docker/multi-process/Dockerfile
  2. 3 2
      docker/single-process/Dockerfile

+ 3 - 1
docker/multi-process/Dockerfile

@@ -22,7 +22,9 @@ ARG OUTDATED_DOCKER_IMAGE_NAMESPACE=false
 ENV OUTDATED_DOCKER_IMAGE_NAMESPACE ${OUTDATED_DOCKER_IMAGE_NAMESPACE}
 
 RUN umask 002 && \
-    LC_ALL=en_US.UTF-8 RAILS_ENV=production APP_SECRET_TOKEN=secret DATABASE_ADAPTER=mysql2 ON_HEROKU=true bundle exec rake assets:clean assets:precompile
+    LC_ALL=en_US.UTF-8 RAILS_ENV=production APP_SECRET_TOKEN=secret DATABASE_ADAPTER=mysql2 ON_HEROKU=true bundle exec rake assets:clean assets:precompile && \
+    chmod g=u /app/Gemfile.lock /app/config/ /app/tmp/
+
 
 EXPOSE 3000
 

+ 3 - 2
docker/single-process/Dockerfile

@@ -19,11 +19,12 @@ ARG OUTDATED_DOCKER_IMAGE_NAMESPACE=false
 ENV OUTDATED_DOCKER_IMAGE_NAMESPACE ${OUTDATED_DOCKER_IMAGE_NAMESPACE}
 
 RUN umask 002 && \
-    LC_ALL=en_US.UTF-8 RAILS_ENV=production APP_SECRET_TOKEN=secret DATABASE_ADAPTER=mysql2 ON_HEROKU=true bundle exec rake assets:clean assets:precompile
+    LC_ALL=en_US.UTF-8 RAILS_ENV=production APP_SECRET_TOKEN=secret DATABASE_ADAPTER=mysql2 ON_HEROKU=true bundle exec rake assets:clean assets:precompile && \
+    chmod g=u /app/Gemfile.lock /app/config/ /app/tmp/
 
 EXPOSE 3000
 
 COPY ["docker/scripts/setup_env", "docker/single-process/scripts/init", "/scripts/"]
 CMD ["/scripts/init"]
 
-USER 1001
+USER 1001