storj/cmd/storagenode/Dockerfile.base

ARG DOCKER_ARCH

FROM ${DOCKER_ARCH:-amd64}/alpine:3.15
RUN apk --no-cache -U add ca-certificates supervisor
RUN mkdir -p /var/log/supervisor /app
COPY cmd/storagenode/docker-base/ /
# set permissions to allow non-root access
RUN chmod -R a+rw /etc/supervisor /var/log/supervisor /app
{cmd/storagenode,Makefile}: add storagenode base image Dockerfile Having the storagenode and storagenode-updater processes in one container requires a process manager to properly handle the individual processes. Using a process manager like supervisord requires that you package supervisord and it configuration in the image, along with the storagenode and storagenode-updater binaries. Installing supervisord requires that we run apk to install it and its dependencies at build time which makes it difficult to build multi-platoform images; executing apk forces a requirement of the build system to run foreign architechtures. This change adds a dockerfile which will be used to build the base image for the storagenode and has supervisord packaged. The base image will be built manually using docker buildx, with QEMU binfmt support. Updates https://github.com/storj/storj/issues/4489 Change-Id: I33f8f01398a7207bca08d8a4a43f4ed56b6a2473 2022-02-24 11:58:15 +00:00			`ARG DOCKER_ARCH`

			`FROM ${DOCKER_ARCH:-amd64}/alpine:3.15`
			`RUN apk --no-cache -U add ca-certificates supervisor`
cmd/storagenode: move supervisord config file to storagenode-base image The supervisord.conf file is edited to set the args for the storagenode and storagenode-updater binaries at runtime. This change moves the config file to the base image so we can set the permission to allow non-root users edit the config file. Non-root user permission is also needed for the /app directory so we can install/update the binaries when run as a non-root user. Updates https://github.com/storj/storj/issues/4489 Change-Id: If7a51a00ea171253e41923501174a43393f4638c 2022-03-08 13:30:04 +00:00			`RUN mkdir -p /var/log/supervisor /app`
			`COPY cmd/storagenode/docker-base/ /`
cmd/storagenode: fix permission to /etc/supervisor in base image This change fixes the `sed: can't create temp file '/etc/supervisor/supervisord.confXXXXXX': Permission denied` issue when editing the supervisord.conf file during runtime as a non-root user. While editing the config file, Sed creates a temporary file, saves the result and then finally mv the original file with the temporary one. So we need to set the permission for the /etc/supervisor where the temporary file is created. Change-Id: Ic9c147a9cf0a6ef94adf702e33054edce1828806 2022-03-15 13:01:14 +00:00			`# set permissions to allow non-root access`
			`RUN chmod -R a+rw /etc/supervisor /var/log/supervisor /app`