UNCLASSIFIED - NO CUI

Skip to content

User ID causes container to fail.

Whenever the dnsmasq container starts up, it needs to create files within the sdp-dnsmasq folders and subfolders. However, it runs as id 100 and the perms are for 105. specifically the dnsmasq.d folder.

https://repo1.dso.mil/dsop/appgate/sdp-dnsmasq/-/blob/development/Dockerfile?ref_type=heads#L19

/sdp-dnsmasq $ id
uid=100(dnsmasq) gid=100(dnsmasq) groups=100(dnsmasq)
/sdp-dnsmasq $ ls -l 
total 16
drwxr-xr-x    2 105      101           4096 Oct 15 00:03 dnsmasq.d
-rwxrwxrwx    1 105      101           1445 Oct 15 00:03 sdp-dnsmasq
-rwxrwxrwx    1 105      101           6710 Oct 15 00:03 sdp-dnsmasq-set-dns

I was able to set runasUser to 105 in my kubernetes environment to get this working properly without permission denied

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information