-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add general documentation page for Ubuntu Chiseled #4968
Conversation
If you are writing to bind or volume mounted directories, you will need to make sure the directory gives the correct permissions to the non-root user. | ||
You can check the user ID that a container will use by running the following command: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It would be nice if there was a good "official" doc page we could link to for managing this with containers but I haven't come across anything very good.
Co-authored-by: Matt Thalman <mthalman@microsoft.com>
Co-authored-by: Justin Anderson <jander-msft@users.noreply.github.com>
Using the github.com link instead of a relative link here because it can be reached from MCR/DH.
documentation/ubuntu-chiseled.md
Outdated
## Common issues adopting distroless containers | ||
|
||
### Trying to invoke a shell | ||
### How can I write my Dockerfile to work without a shell? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't feel like we're actually answering this question. We're just saying "make sure don't run shell commands". We need to be more specific about this. One thing is to mention the use of multi-stage Dockerfiles as a pattern to help with executing necessary commands. The other is to call out the use of app code that may be running Process.Start
with UseShellExecute
or whatever it's called and how that would be bad.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good. Just a few suggested edits.
Co-authored-by: Matt Thalman <mthalman@microsoft.com>
Part of #4914