Run builds as the calling user

This means no 'sudo' is needed to copy files out.
This commit is contained in:
Tim Hockin
2016-05-11 23:55:21 -07:00
parent feea382960
commit ac75bd11cf
5 changed files with 21 additions and 21 deletions

View File

@@ -565,6 +565,7 @@ function kube::build::ensure_data_container() {
"${DOCKER[@]}" run
"${DOCKER_DATA_MOUNT_ARGS[@]}"
--name "${KUBE_BUILD_DATA_CONTAINER_NAME}"
--user "$(id -u):$(id -g)"
"${KUBE_BUILD_IMAGE}"
true
)
@@ -583,6 +584,7 @@ function kube::build::run_build_command() {
local -a docker_run_opts=(
"--name=${KUBE_BUILD_CONTAINER_NAME}"
"--user=$(id -u):$(id -g)"
"${DOCKER_MOUNT_ARGS[@]}"
)
@@ -635,9 +637,10 @@ function kube::build::copy_output() {
# Bug: https://github.com/docker/docker/pull/8509
local -a docker_run_opts=(
"--name=${KUBE_BUILD_CONTAINER_NAME}"
"${DOCKER_MOUNT_ARGS[@]}"
-d
)
"--user=$(id -u):$(id -g)"
"${DOCKER_MOUNT_ARGS[@]}"
-d
)
local -ra docker_cmd=(
"${DOCKER[@]}" run "${docker_run_opts[@]}" "${KUBE_BUILD_IMAGE}"