Skip to content

Conversation

@florentx
Copy link
Contributor

No description provided.

USER odoo
RUN python3 -m venv /odoo/.venv --system-site-packages
RUN umask 007 \
&& python3 -m venv /odoo/.venv --system-site-packages
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why the umask here (and following steps) ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actually all the permissions are set to 660/770 for files copied to the image (lines 60 to 65 above).
We set the umask before installing virtualenv and python packages, so they are created with same permissions.

I don't think it makes a difference at the end, even regarding security. So if we'd like the Dockerfile to be simpler, we can remove the umask instructions.

Copy link

@twalter-c2c twalter-c2c left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good AFAICT.

@florentx florentx merged commit df7fd31 into master Jan 7, 2026
6 checks passed
@florentx florentx deleted the 19_set_permissions branch January 7, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants