Skip to content

Rstudio server container cannot access file on host granted by secondary user groups #993

@Usos

Description

@Usos

We are running a rstudio-server container managed by podman rootless setting and mounted a folder (e.g. /mnt/home/shared) in the host to pass shared data. The users may have different groups priority to get access the data they need. The data in such folder is set mode of 750. For a user A, he is a member of group ga(primary group) and also a member of group gb (secondary group),but he cannot access the data belong to gb in the container (lost the access granted by secondary group). According to the suggest in podman repository ([https://github.com/containers/podman/issues/10166]), I have tried to set the flag --group-add keep-groups but it still not work.

Here is the script we use to init a rstudio-server container:
podman --runtime crun --runroot $tmp --cgroup-manager=cgroupfs run --network=slirp4netns --group-add keep-groups --rm -ti -e DISABLE_AUTH=true -p $free_port:8787 -v $r_home_dir:/root -v $share_path:/root/sharedata rocker/rstudio

Is there anyway to make the user keep their access permission from all groups?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions