search

moby / moby

The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
https://mobyproject.org/
Apache License 2.0
68.53k stars 18.64k forks source link

Add umask configuration into runc #41680

Open gauravg2683 opened 3 years ago

gauravg2683 commented 3 years ago

Description

I see now umask support added https://github.com/opencontainers/runc/commit/a63f99fcc5879e5ddedff40f77341497b6d33759#diff-e0932af06cb46065b2ef5fc89bc2bd9b880c9578e01b89ef4ecaeffb78a8bef0 but don't see any option to add in config https://docs.docker.com/engine/reference/commandline/dockerd/ because it's not added into runc yet. Please add this configuration into runc. cc @thaJeztah

Slack reference : https://cloud-native.slack.com/archives/CGEQHPYF4/p1604609074087400

gauravg2683 commented 3 years ago

@thaJeztah can we add this in 20.10 planning or in next release? Just want to prioritize it because it's currently blocker for us to migrate to non-root user.

dims commented 3 years ago

@gauravg2683 runc repo is here https://github.com/opencontainers/runc should this issue be here or there?

dims commented 3 years ago

looks related to https://github.com/aws/containers-roadmap/issues/1059

gauravg2683 commented 3 years ago

@gauravg2683 runc repo is here https://github.com/opencontainers/runc should this issue be here or there?

@dims I was told me to report this here. Let me know if this need to open in https://github.com/opencontainers/runc

gauravg2683 commented 3 years ago

looks related to aws/containers-roadmap#1059

Actually I figured this out with AWS that it can handle at ECS end but solution is not available to use as of now.

gauravg2683 commented 3 years ago

/cc @mlaventure @tonistiigi @crosbymichael