Skip to content

fix: Fixed Dockerfiles to be able to run in Openshift without anyuid #617

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
shreemaan-abhishek merged 5 commits into from
Apr 13, 2026
+11 −2
Merged

fix: Fixed Dockerfiles to be able to run in Openshift without anyuid #617

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
36f89e3
Fixed Dockerfiles to make ownership gid 0
sebgott Mar 23, 2026
3375893
Remove for debian-dev
sebgott Mar 23, 2026
b104dd3
Align redhat dockerfile with ubuntu and debian dockerfile
sebgott Mar 26, 2026
17693a8
Change ownership to root group
sebgott Apr 7, 2026
4d9c83e
Removed redundant group change
sebgott Apr 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion debian/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,9 @@ ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/

RUN groupadd --system --gid 636 apisix \
&& useradd --system --gid apisix --no-create-home --shell /usr/sbin/nologin --uid 636 apisix \
&& chown -R apisix:apisix /usr/local/apisix
&& chown -R apisix:apisix /usr/local/apisix \
&& chgrp -R 0 /usr/local/apisix \
Comment thread
AlinsRan marked this conversation as resolved.
Outdated
&& chmod -R g=u /usr/local/apisix

USER apisix

Expand Down
8 changes: 8 additions & 0 deletions redhat/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,11 +35,19 @@ WORKDIR /usr/local/apisix

ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin

RUN groupadd --system --gid 636 apisix \
&& useradd --system --gid apisix --no-create-home --shell /usr/sbin/nologin --uid 636 apisix \
&& chown -R apisix:apisix /usr/local/apisix \
&& chgrp -R 0 /usr/local/apisix \

@shreemaan-abhishek shreemaan-abhishek Apr 8, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the line above this already changes the group to 0, so you can remove this now (from all three Dockerfiles)

&& chmod -R g=u /usr/local/apisix

# forward request and error logs to docker log collector
RUN ln -sf /dev/stdout /usr/local/apisix/logs/access.log \
&& ln -sf /dev/stderr /usr/local/apisix/logs/error.log \
&& rm /usr/local/openresty/bin/etcdctl

USER apisix

EXPOSE 9080 9443

COPY ./docker-entrypoint.sh /docker-entrypoint.sh
Expand Down
4 changes: 3 additions & 1 deletion ubuntu/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,9 @@ ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/

RUN groupadd --system --gid 636 apisix \
&& useradd --system --gid apisix --no-create-home --shell /usr/sbin/nologin --uid 636 apisix \
&& chown -R apisix:apisix /usr/local/apisix
&& chown -R apisix:apisix /usr/local/apisix \
&& chgrp -R 0 /usr/local/apisix \
&& chmod -R g=u /usr/local/apisix

USER apisix

Expand Down
Loading