Dockerfile Linux 中的权限问题

Question

This is my dockerfile. Im using helm chart to deploy it.

FROM openjdk:8
RUN addgroup -g 2000 -S iuser && adduser -u 1000 -S iuser -G iuser
RUN mkdir /database && mkdir /database/StagingArea && mkdir /database/HistoryArea
RUN mkdir /opt/i && mkdir /opt/i/jars && mkdir /opt/i/scripts && mkdir /opt/i/config
RUN echo "I_HOME=/opt/i" >> /etc/environment
RUN export I_HOME=/opt/i
RUN chmod -R 777 /database/StagingArea && chmod -R 777 /database/HistoryArea
RUN chmod -R 777 /opt/i && chmod -R 777 /opt/i/jars && chmod -R 777 /opt/i/scripts && chmod -R 777 /opt/i/config
RUN chown -R 1000:2000 /opt/i && chown -R 1000:2000 /opt/i/jars && chown -R 1000:2000 /opt/i/scripts && chown -R 1000:2000 /opt/i/config
USER iuser
WORKDIR /opt
ADD softwaredownload-routing/target/jars /opt/i/jars
ADD software-downloader/config/common /opt/i/config
ADD software-downloader/config/linux /opt/i/config
ADD software-downloader/scripts/plugins /opt/i/scripts
ADD software-downloader/scripts/linux /opt/i/scripts
EXPOSE 3000
CMD ["sh", "-c", "./i/scripts/startapplication.sh ; tail -f ./i/i_workspace/logs/softwaredownload-trace.log"]

Getting pod status 'Crashloopbackoff' with kubectl logs pod giving this error:

sh: ./i/scripts/startapplication.sh: Permission denied

Snippet of Deployment.yaml file of helm template

spec:
      securityContext:
        fsGroup: 2000
      containers:
        - name: i
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          ports:
            - containerPort: {{ .Values.service.targetPort }}
          securityContext:
            privileged: false
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            runAsUser: 1000
            runAsGroup: 2000

Answer 1

error sh: ./i/scripts/startapplication.sh: Permission denied could indicate missing execute permission bit on the file. You can add that to the Dockerfile instructions.

RUN ["chmod", "+x", "/opt/i/scripts/startapplication.sh"]