picostack / pico

A Git-driven task runner built to facilitate GitOps and Infrastructure-as-Code while securely passing secrets to tasks.
https://pico.sh
MIT License
54 stars 6 forks source link

Non root container #93

Open Southclaws opened 3 years ago

Southclaws commented 3 years ago

The Pico Docker image is currently root (the insane default of Docker)

This means that making quick ad-hoc changes to targets or config is quite annoying. You have to chown the targets directory, do your quick changes/tests and chown it back to root (or let Pico overwrite with root).

Instead, there should be a better solution to this, allowing users to deploy new setups easily where they can deploy manually a few times to work out any first-time-deploy issues then commit those changes and leave Pico to handle the rest.

The ideal workflow would be: