From d9920faa80dc9b41616035ca50c7079d1f935cf5 Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Sat, 12 Sep 2020 10:54:25 +0200 Subject: [PATCH] The entrypoints in Docker Image should be owned by Airflow (#10853) Since we are running the airflow image as airflow user, the entrypoint and clear-logs scripts should also be set as airflow. This had no impact if you actually run this as root user or when your group was root (which was recommended). --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 7fc4815db5e5a..6dd168090317d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -349,8 +349,8 @@ RUN mkdir -pv "${AIRFLOW_HOME}"; \ COPY --chown=airflow:root --from=airflow-build-image /root/.local "${AIRFLOW_USER_HOME_DIR}/.local" -COPY scripts/in_container/prod/entrypoint_prod.sh /entrypoint -COPY scripts/in_container/prod/clean-logs.sh /clean-logs +COPY --chown=airflow:root scripts/in_container/prod/entrypoint_prod.sh /entrypoint +COPY --chown=airflow:root scripts/in_container/prod/clean-logs.sh /clean-logs RUN chmod a+x /entrypoint /clean-logs # Make /etc/passwd root-group-writeable so that user can be dynamically added by OpenShift