Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Docker permissions #114

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

manics
Copy link
Member

@manics manics commented Mar 7, 2019

A couple of fixes to get the docker node running:

  • Ensure the docker group id inside the container and outside the host are the same (needed since /var/run/docker.sock is bind-mounted
  • The workspace is shared between the Jenkins node and the ephemeral container, so can't be transiently created

/var/run/docker.sock is mounted from the host into the docker node. Since Jenkins runs as a non-privileged user the Jenkins user must be a member of the docker group, and the docker group ID inside the node must match that of the host. Therefore run.sh is changes the GID of the docker group inside the node
@joshmoore
Copy link
Member

Is the docker now being used?

@manics
Copy link
Member Author

manics commented Mar 19, 2019

Not in the new jobs, though apparently it's used in some of the BF jobs. If the GIDs and permissions in devspace and the host happen to be compatible this PR doesn't do anything, otherwise it should ensure the docker nodes work regardless of your user-id

@joshmoore
Copy link
Member

I can see the benefit moving forward for new devspaces, but I'm concerned about how to roll out this (and perhaps some of the other changes) to a running devspace. If it's not required, and they are currently working, perhaps we hold this for 0.12 (assuming your current batch of PRs is targeting 0.11)

@manics
Copy link
Member Author

manics commented Mar 19, 2019

Sounds fine to me

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants