【问题标题】:Permission denied when creating a project from Container Image in OpenShift在 OpenShift 中从容器映像创建项目时权限被拒绝
【发布时间】:2020-03-10 10:50:03
【问题描述】:

我用来创建这个 Docker 镜像的 Dockerfile。它在我的本地系统中运行良好。

FROM payara/server-full

COPY ./target/jakartaee8-starter.war $DEPLOY_DIR

OpenShift 似乎由非 root 用户运行 docker。但是payara/server-full是Payara维护的,所以不受我控制。如何在 Openshift 中解决这个问题?

[Entrypoint] running /opt/payara/scripts/init_1_generate_deploy_commands.sh
touch: cannot touch '/opt/payara/config/post-boot-commands.asadmin': Permission denied
touch: cannot touch '/opt/payara/config/pre-boot-commands.asadmin': Permission denied
grep: /opt/payara/config/post-boot-commands.asadmin: No such file or directory
Adding deployment target /opt/payara/deployments/jakartaee8-starter.war to post boot commands
/opt/payara/scripts/init_1_generate_deploy_commands.sh: line 48: /opt/payara/config/post-boot-commands.asadmin: Permission denied

[Entrypoint] ignoring /opt/payara/scripts/init.d/*

touch: cannot touch '/opt/payara/config/post-boot-commands.asadmin': Permission denied
touch: cannot touch '/opt/payara/config/pre-boot-commands.asadmin': Permission denied
preboot commands file does not exist: /opt/payara/config/pre-boot-commands.asadmin
Usage: asadmin [asadmin-utility-options] start-domain
    [-v|--verbose[=<verbose(default:false)>]]
    [--upgrade[=<upgrade(default:false)>]]
    [-w|--watchdog[=<watchdog(default:false)>]]
    [-d|--debug[=<debug(default:false)>]]
    [-n|--dry-run[=<dry-run(default:false)>]]
    [--drop-interrupted-commands[=<drop-interrupted-commands(default:false)>]]
    [--prebootcommandfile <prebootcommandfile>]
    [--postbootcommandfile <postbootcommandfile>] [--domaindir <domaindir>]
    [-?|--help[=<help(default:false)>]] [domain_name]
ERROR: Command start-domain failed.

【问题讨论】:

  • 您是否尝试过提升用户权限?

标签: docker kubernetes openshift payara


【解决方案1】:

您应该更新用户和命名空间的安全上下文权限。

例如

oc adm policy add-scc-to-user privileged -z default -n <YOUR_NAMESPACE>

【讨论】:

猜你喜欢
  • 1970-01-01
  • 1970-01-01
  • 2012-01-05
  • 1970-01-01
  • 1970-01-01
  • 2014-05-18
  • 1970-01-01
  • 1970-01-01
  • 1970-01-01
相关资源
最近更新 更多