Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Dashy Run as Root #757

Closed
Cosmonear opened this issue Jun 23, 2022 · 2 comments
Closed

[BUG] Dashy Run as Root #757

Cosmonear opened this issue Jun 23, 2022 · 2 comments
Assignees
Labels
🐛 Bug [ISSUE] Ticket describing something that isn't working

Comments

@Cosmonear
Copy link

Cosmonear commented Jun 23, 2022

Environment

Self-Hosted (Docker)

Version

2.1.0

Describe the problem

Dashy Run as Root.

In my docker-compose file I have :
environment:
- NODE_ENV=production
- UID=1000
- GID=1000

But there is only root user in the container :

docker-compose exec dashy ps auxw
PID USER TIME COMMAND
1 root 0:00 /sbin/tini -- yarn build-and-start
7 root 0:00 node /opt/yarn-v1.22.15/bin/yarn.js build-and-start
28 root 0:00 /usr/local/bin/node /app/node_modules/.bin/npm-run-all --p
39 root 0:00 /usr/local/bin/node /opt/yarn-v1.22.15/bin/yarn.js run bui
40 root 0:00 /usr/local/bin/node /opt/yarn-v1.22.15/bin/yarn.js run sta
61 root 0:01 /usr/local/bin/node server
62 root 0:54 /usr/local/bin/node /app/node_modules/.bin/vue-cli-service
123 root 0:00 ps auxw

When I try to set user variable to 1000:1000 as it is write here :
I have permission denied in the docker logs and it's not working at all.

  • Building for production...
    WARN A new version of sass-loader is available. Please upgrade for best experience.
    ERROR Error: EACCES: permission denied, rmdir '/app/dist'
    Error: EACCES: permission denied, rmdir '/app/dist'
    error Command failed with exit code 1.
    info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.
    ERROR: "build-watch" exited with 1.
    error Command failed with exit code 1.
    info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.

I found a similar issue raised before but not resolved.

It is a security breach. I can't use it if it's not resolve.
And I think a lot of people can't too.

Additional info

No response

Please tick the boxes

Fast, reliable, and secure dependency management.
@Cosmonear Cosmonear added the 🐛 Bug [ISSUE] Ticket describing something that isn't working label Jun 23, 2022
@liss-bot
Copy link
Collaborator

If you're enjoying Dashy, consider dropping us a ⭐
🤖 I'm a bot, and this message was automated

@Lissy93
Copy link
Owner

Lissy93 commented Jun 23, 2022

Closing as dup of #340

See also open PRs #502 and #606

@Lissy93 Lissy93 closed this as completed Jun 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🐛 Bug [ISSUE] Ticket describing something that isn't working
Projects
None yet
Development

No branches or pull requests

3 participants