Error deploying in OpenShift because of chown

What happened?

Hi, I’m trying to setup a POC of Reposilite for my organization, it runs perfectly via podman on my development machine, but when I try to deploy it in an openshift cluster the pod crashes right after the start. Below you will find the log entries before the crash, and here’s my deployment yaml:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: dep-reposilite
spec:
  replicas: 1
  selector:
    matchLabels:
      deployment: reposilite
  template:
    metadata:
      labels:
        deployment: reposilite
    spec:      
      containers:      
      - name: reposilite
        image: dzikoysk/reposilite:3.2.0       
        ports:
        - containerPort: 8080
          name: tcp-8080
          protocol: TCP
        resources:
          limits:
            cpu: 500m
            memory: 256M  

Does the container need root priviliges to run? In this case this would break one of my company’s security policy.

Thanks for the support!

Reposilite version

3.x

Relevant log output

chown: changing ownership of '/app/data/lost+found': Operation not permitted
chown: changing ownership of '/app/data': Operation not permitted
chown: changing ownership of '/app/entrypoint.sh': Operation not permitted
chown: changing ownership of '/app/reposilite.jar': Operation not permitted
chown: changing ownership of '/app': Operation not permitted
chown: changing ownership of '/var/log/reposilite': Operation not permitted
runuser: may not be used by non-root users

[bennyevangelista]

I’ve done it 😃 !

I’ve built a new image, starting from official reposilite:3.2.0 and fixing folder permissions. Here’s my Dockerfile (it’t the alpha version, next I’m gonna add a full entrypoint.sh supporting the optional parameters as in the original version).

FROM docker.io/dzikoysk/reposilite:3.2.0

WORKDIR /app

RUN chgrp -R 0 /app && \
    chmod -R g=u /app
	
ENTRYPOINT ["java", "-jar", "reposilite.jar"]

Now Openshift deploy works and reposilite it’s up and running.

[dzikoysk]

Let me know if you’ll find something related to this issue 😃