http://widerin.net/tags/grafana/Recent content in Grafana on widerinHugoenSun, 26 Jul 2020 12:30:34 +0200http://widerin.net/posts/2017/official-grafana-docker-image-on-openshift-3.x/Sun, 10 Sep 2017 00:00:00 +0000http://widerin.net/posts/2017/official-grafana-docker-image-on-openshift-3.x/<p>Running offical docker images from <a href="https://hub.docker.com">Docker hub</a> on <a href="https://www.openshift.com/">OpenShift</a> can be painful as it uses <a href="https://docs.openshift.org/latest/creating_images/guidelines.html#openshift-origin-specific-guidelines">arbitrary user ids</a> by default. Often you end up building your own or using 3rd party forks/clones of the offical image, which leds to additional effort to keep it up to date in terms of security and/or version upgrades.</p> <div class="callout callout-default"> <p class="callout-title">Background</p> Technically speaking, [OpenShift] generates a dynamic <code>uid</code> to launch a container which will not have an associated entry in the containers <code>/etc/passwd</code> file. At docker image build time this user does not exist so <code>chown</code> files and/or directories to this <code>uid</code> is not possible. </div> <h2 id="grafanas-docker-image">Grafana&rsquo;s docker image</h2> <h3 id="gosu">gosu</h3> <p><a href="https://grafana.com/">Grafana</a> runs its service as <code>grafana</code> user and uses an <em>entrypoint script</em> which runs as <code>root</code> and launches <code>grafana-server</code> as <code>grafana</code> user by using <a href="https://github.com/tianon/gosu">gosu</a>, see <a href="https://github.com/grafana/grafana-docker/blob/b1fbad4afe22f88931d0b632d9a3c0df4221345c/run.sh#L42-L49">run.sh on github.com</a></p>