Why there is no not privileged user in the image? about yii2-docker HOT 7 CLOSED

Good idea. @schmunk42 what do you think?

from yii2-docker.

Basically yes, if it is intuitive. One reason there's nothing by default was related to Alpine, which has no usermod by default so you can't really switch the user.

From my experience, I find it OK to be root when I run exec bash, since there's hardly anything I want to do as an unprivileged user here. Examples welcome.

While our app (when running yii) usually runs as the same user as the webserver, ie. to prevent permission issues for directories, etc... when I need to run this "as root" I usually prepend PHP_USER_ID=0 yii to the command (which could also be aliased as suyii).

from yii2-docker.

why not install the package usermod in image for compatibility?

RUN echo http://dl-2.alpinelinux.org/alpine/edge/community/ >> /etc/apk/repositories
RUN apk --no-cache add shadow

from yii2-docker.

why not install the package usermod in image for compatibility?

Last time I tried this it required several hundred megabytes of additional packgages.

Moreover Alpine has highly esoteric issues, see also https://github.com/docker-library/docs/blob/master/php/README.md#phpalpine

from yii2-docker.

docker image ls

alpine-usermod        latest              95405d664f72        4 minutes ago       6.13MB
alpine                latest              3fd9065eaf02        5 months ago        4.15MB

Dockerfile

FROM alpine

RUN echo http://dl-2.alpinelinux.org/alpine/edge/community/ >> /etc/apk/repositories
RUN apk --no-cache add shadow

from yii2-docker.

It's good if it is so easy now, but it's not planned to support Alpine anyway.

from yii2-docker.

You can do this with Debian images like so:

docker-compose exec -u www-data php bash
www-data@bffa62a55ea8:/app$ whoami
www-data

from yii2-docker.