mirror of
https://gitee.com/milvus-io/milvus.git
synced 2026-01-07 19:31:51 +08:00
d15db7596d
OpenShift runs Pods with a random uid and gid 0. As Milvus needs to write into the /milvus directory, this fix modifies the group permissions to allow the root group (gid 0) to write into it. This is a simple solution that allows to run Milvus on OpenShift without adding security constraints, use special ServiceAccounts or whatever. This should also not impact any other kubernetes platform as it's a simple group permission change, nothing regarding the userid. Note: Other actions are necessary to properly deploy the full stack (Minio, Pulsar,...) on OpenShift. I will document them in the helm chart project. Fixes #25565 Signed-off-by: Guillaume Moutier <guillaume.moutier@gmail.com>
39 lines
1.2 KiB
Docker
39 lines
1.2 KiB
Docker
# Copyright (C) 2019-2020 Zilliz. All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software distributed under the License
|
|
# is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
|
|
# or implied. See the License for the specific language governing permissions and limitations under the License.
|
|
|
|
FROM amazonlinux:2023
|
|
|
|
ARG TARGETARCH
|
|
|
|
RUN yum install -y wget libgomp libaio libatomic && \
|
|
rm -rf /var/cache/yum/*
|
|
|
|
COPY ./bin/ /milvus/bin/
|
|
|
|
COPY ./configs/ /milvus/configs/
|
|
|
|
COPY ./lib/ /milvus/lib/
|
|
|
|
RUN chgrp -R root /milvus && \
|
|
chmod -R g+rwx /milvus
|
|
|
|
ENV PATH=/milvus/bin:$PATH
|
|
ENV LD_LIBRARY_PATH=/milvus/lib:$LD_LIBRARY_PATH:/usr/lib
|
|
ENV LD_PRELOAD=/milvus/lib/libjemalloc.so
|
|
ENV MALLOC_CONF=background_thread:true
|
|
|
|
# Add Tini
|
|
ADD https://github.com/krallin/tini/releases/download/v0.19.0/tini-$TARGETARCH /tini
|
|
RUN chmod +x /tini
|
|
ENTRYPOINT ["/tini", "--"]
|
|
|
|
WORKDIR /milvus
|