cnpem / epics-in-docker

Container images with EPICS and modules
5 stars 2 forks source link

Ensure single UID is used inside containers #69

Closed henriquesimoes closed 2 months ago

henriquesimoes commented 3 months ago

APT is one of the applications that assume multiple effective UIDs exist, so that it can sandbox itself. When running with ignore_chown_errors option enabled (see podman(1)), this will lead to setgroups, seteuid and setguid syscalls to fail, breaking most of apt commands.

Ensure that a single UID is used inside the containers, both at base build image (without /etc/set{u,g}id settings) and IOC runtime, especially allowing one to properly use apt.