search

mercure-imaging / mercure

mercure DICOM Orchestrator
https://mercure-imaging.org
MIT License
66 stars 32 forks source link

File ownership after processing steps #15

Closed tblock79 closed 3 years ago

tblock79 commented 3 years ago

Currently, files created during processing are owned by root (as created from within the docker container). Might create issues with systemd installation setup, as the systemd processes are not running as root. Need to find solution.

joshy commented 3 years ago

In the systemd file you can also specify a user (USER=) under which user the service should run. Would that solve the problem?

tblock79 commented 3 years ago

Not sure if this alone would solve it. Problem is that the user accounts of the host system don't map into the Docker container that executes the processing code. Currently, the processing code (inside the Docker container) is running as root, while the systemd services are running as non-root user (for security reasons). It might be possible to pass the UID and GID when starting the docker container, but need to check if this would also work with Nomad.

tblock79 commented 3 years ago

Solved by commits 3b7c1601d4e7c4e0be17e3b6f983e715a03b9819 and 2a430acba0380a30b0756620d5f025b59dfa7879