Skip to content

Conversation

@Vishva066
Copy link

This pull request improves the security and consistency of the Docker images by updating user and group permissions for the apisix directory in both the debian and debian-dev Dockerfiles.

The main changes ensure that the container runs as a non-root user and that directory permissions are set appropriately for group access.

Dockerfile permission and user management updates:

  • Added commands to change the group ownership of /usr/local/apisix to group ID 0 and set group permissions to match user permissions, improving compatibility with OpenShift and similar environments (debian/Dockerfile, debian-dev/Dockerfile). [1] [2]
  • In debian-dev/Dockerfile, explicitly added creation of the apisix system group and user, set ownership and permissions for /usr/local/apisix, and switched to running the container as the apisix user.

This PR closes #611

…APISIX to run in Openshift instead of anyuid command
@Baoyuantop
Copy link
Contributor

Hi @Vishva066, do Dockerfiles for other image types need to be modified?

@Vishva066
Copy link
Author

Yes for the other os also it needs to be updated. I thought this is the mostly used docker files so I updated it first. I can also update the other docker files also

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fixing APISIX to work without anyuid for SCC in openshift

2 participants