Skip to content

Commit

Permalink
When running under podman use keep-groups to maintain the groups of t…
Browse files Browse the repository at this point in the history
…he user

Some of the permissions of the user depend on her extra groups.
Not maintaining the entire groups list can prevent some operations

Signed-off-by: Ygal Blum <[email protected]>
  • Loading branch information
ygalblum committed May 11, 2023
1 parent d878414 commit 25186fe
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions skipper/runner.py
Original file line number Diff line number Diff line change
Expand Up @@ -91,6 +91,9 @@ def _run_nested(fqdn_image, environment, command, interactive, name, net, publis
except KeyError:
pass

if utils.get_runtime_command() == "podman":
cmd += ['--group-add', 'keep-groups']

if use_cache:
cmd += ['-e', 'SKIPPER_USE_CACHE_IMAGE=True']

Expand Down

0 comments on commit 25186fe

Please sign in to comment.