Build as root.
This commit is contained in:
@@ -90,10 +90,10 @@ spec:
|
|||||||
mountPath: /home/user/.local/share/buildkit
|
mountPath: /home/user/.local/share/buildkit
|
||||||
- name: buildkitd-toml
|
- name: buildkitd-toml
|
||||||
mountPath: /home/user/.config/buildkit
|
mountPath: /home/user/.config/buildkit
|
||||||
securityContext:
|
# securityContext:
|
||||||
runAsNonRoot: true
|
# runAsNonRoot: true
|
||||||
runAsUser: 1000
|
# runAsUser: 1000
|
||||||
runAsGroup: 1000
|
# runAsGroup: 1000
|
||||||
- name: build-and-push
|
- name: build-and-push
|
||||||
image: $(params.BUILDER_IMAGE)
|
image: $(params.BUILDER_IMAGE)
|
||||||
workingDir: "$(workspaces.source.path)"
|
workingDir: "$(workspaces.source.path)"
|
||||||
@@ -121,9 +121,9 @@ spec:
|
|||||||
securityContext:
|
securityContext:
|
||||||
seccompProfile:
|
seccompProfile:
|
||||||
type: Unconfined
|
type: Unconfined
|
||||||
runAsNonRoot: true
|
# runAsNonRoot: true
|
||||||
runAsUser: 1000
|
# runAsUser: 1000
|
||||||
runAsGroup: 1000
|
# runAsGroup: 1000
|
||||||
# appArmorProfile:
|
# appArmorProfile:
|
||||||
# type: Unconfined
|
# type: Unconfined
|
||||||
env:
|
env:
|
||||||
@@ -149,7 +149,7 @@ spec:
|
|||||||
- name: metadata-out
|
- name: metadata-out
|
||||||
mountPath: /home/user/.metadata
|
mountPath: /home/user/.metadata
|
||||||
readOnly: true
|
readOnly: true
|
||||||
securityContext:
|
# securityContext:
|
||||||
runAsNonRoot: true
|
# runAsNonRoot: true
|
||||||
runAsUser: 1000
|
# runAsUser: 1000
|
||||||
runAsGroup: 1000
|
# runAsGroup: 1000
|
||||||
|
|||||||
Reference in New Issue
Block a user