Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consistent USER in container #1

Open
vsoch opened this issue Aug 26, 2021 · 2 comments
Open

Consistent USER in container #1

vsoch opened this issue Aug 26, 2021 · 2 comments

Comments

@vsoch
Copy link
Collaborator

vsoch commented Aug 26, 2021

Typically it's easiest to just ignore the user and be careful to not install anything in root's home, which means it will be root for the base when run with Docker, but more likely just the user on the cluster in the case of Singularity. So I'm wondering if this is needed:

useradd -ms /bin/bash axom
printf "axom:axom" | chpasswd
adduser axom sudo
printf "axom ALL= NOPASSWD: ALL\\n" >> /etc/sudoers

And if so, if there should be a standard RADIUSS user like radius? Under what scenario do we need a user named axom that has sudo? ping @davidbeckingsale

@davidbeckingsale
Copy link
Member

I don't think it's necessary, probably just set it up that way because one of us thought it was the right thing to do when we made these initially.

Looks like the axom tpl images but should be easy to change.

It's better to use whatever the best practice is.

@vsoch
Copy link
Collaborator Author

vsoch commented Aug 26, 2021

My instinct is that the base containers should be agnostic to users, e.g., if a special user or permission is needed, said user can be added on the level of the project repo (and probably not the base). But wanted to just open an issue to discuss in case there was a reason for a global one!

davidbeckingsale pushed a commit that referenced this issue Dec 12, 2023
* first shot at adding/testing github workflow to update containers.
After this we will want to have builds for all the newly generated (or changed) files,
but just to test. Only on merge will they be build -> deploy

Signed-off-by: vsoch <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants