Description
Describe the bug
When running as non-root, the Docker image fails to run with:
Traceback (most recent call last):
File "/cloudflare-ddns.py", line 17, in <module>
import requests
ModuleNotFoundError: No module named 'requests'
This is because the directory where the dependencies are copied, /root/.local/, is not the user's home directory, and is inaccessible.
To Reproduce
Steps to reproduce the behavior:
- Using the Kubernetes manifest, add:
template:
spec:
securityContext:
runAsUser: 1000
runAsGroup: 1000
- Pod will fail to run
Expected behavior
The pod should run as non root. Ideally, a USER directive will be used in the Dockerfile, so runAsNonRoot: true can be used in preference to runAsUser and runAsGroup.
Introduced by the change to a multi-stage Docker build: #127
Metadata
Assignees
Labels
No labels
Activity