Docker php apache 權限被拒絕

Question

I'm working on configuring a docker setup for an old php project with apache, php 7.2 and mariadb. 在我啟動並運行容器后，當我嘗試從 php 寫入文件時，權限被拒絕。

解決這個問題的最佳方法是什么？

docker-compose.yml

version: "3"

networks:
  dirtbike:

services:
  webserver:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: dirtbike-webserver
    restart: 'always'
    depends_on:
      - database
    ports:
      - "80:80"
      - "443:443"
    networks:
      - dirtbike
    volumes:
      - ./public_html:/var/www/html
  database:
    image: mariadb:10.3
    container_name: dirtbike-database
    restart: 'always'
    networks:
      - dirtbike
    ports:
      - "127.0.0.1:3306:3306"
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}

Dockerfile

FROM php:7.2-apache-stretch

RUN docker-php-ext-install pdo_mysql

RUN a2enmod ssl && a2enmod rewrite && a2enmod headers
RUN mkdir -p /etc/apache2/ssl
COPY ./Docker/ssl/*.pem /etc/apache2/ssl/

COPY ./Docker/config/apache/dirtbike.conf /etc/apache2/sites-available/000-default.conf

index.php

<?php

file_put_contents(__DIR__.DIRECTORY_SEPARATOR.'test.txt', 'lorem ipsum');

Answer 1

問題是來自容器（www-root）的用戶與來自主機的用戶不同。 我在 docker-compose 文件中添加了 args: uid: ${UID} ，如下所示：

version: "3"

networks:
  dirtbike:

services:
  webserver:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        uid: ${UID}
    container_name: dirtbike-webserver
    restart: 'always'
    depends_on:
      - database
    ports:
      - "80:80"
      - "443:443"
    networks:
      - dirtbike
    volumes:
      - ./public_html:/var/www/html

在 Dockerfile 我添加了ARG uid和RUN usermod -u ${uid} www-data && groupmod -g ${uid} www-data; 像這樣：

FROM php:7.2-apache-stretch

ARG uid

RUN docker-php-ext-install pdo_mysql

RUN a2enmod ssl && a2enmod rewrite && a2enmod headers
RUN mkdir -p /etc/apache2/ssl
COPY ./Docker/ssl/*.pem /etc/apache2/ssl/

COPY ./Docker/config/apache/dirtbike.conf /etc/apache2/sites-available/000-default.conf

RUN usermod -u ${uid} www-data \
    && groupmod -g ${uid} www-data;

Answer 2

在您的 docker 撰寫文件中，您可以添加本地計算機用戶。 首先你需要檢查當前的用戶 ID，在我的例子中是 ubuntu：

echo ${UID}

Output：

1001

docker-compose.yml：

webserver:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: dirtbike-webserver
    restart: 'always'
    depends_on:
      - database
    ports:
      - "80:80"
      - "443:443"
    networks:
      - dirtbike
    user: 1001 # local machine user id
    volumes:
      - ./public_html:/var/www/html

希望能幫到你。