3:45 p.m.
Ricardo,
Thanks for the reply.
Like what I asked in
https://github.com/RedHatInsights/ubi-hive/issues/8#issuecomment-870040679 I’m aware of
the guidelines of container images for OpenShift must support any UID and using GID 0.
I like the solution of providing username in /etc/passwd via an entrypoint.sh, the only
problem is this entrypoint.sh is provided in another repo or any other repo that uses this
UBI-hive.
According to my use case where it uses hive-metastore to store table schema and partitions
info for Trino, I’m using the entrypoint.sh solution now, I wonder if it’s a good idea to
provide such entrypoint.sh within the image itself, or at least document it that it needs
to provide a username for the java process or it won’t function.
On Jul 2, 2021, at 10:00 AM, Ricardo Martinelli de Oliveira
<rmartine@redhat.com<mailto:rmartine@redhat.com>> wrote:
This Message Is From an External Sender
This message came from outside your organization.
Hello Ke,
Can you share your use-case for the ubi-hive image? What problem are you facing?
When creating images to run on top of OpenShift, we follow some guidelines[1] to improve
security in the deployments. Explicitly assigning a username is not a good practice
because of the random UIDs that can be assigned to the container running on OpenShift, and
thus adding an entry in /etc/passwd from an entrypoint script is the solution for
processes that need a name assigned to a UID. Due to this, I think your change won't
be accepted by the ubi-hive developers. That being said, though we use their image with
Trino, they are not part of the ODH community.
Hope that helps.
[1]
https://docs.openshift.com/container-platform/4.7/openshift_images/create...
On Thu, Jul 1, 2021 at 6:21 PM Ke Zhu
<kzhu@us.ibm.com<mailto:kzhu@us.ibm.com>> wrote:
I’ve followed the comments of
https://github.com/opendatahub-io/odh-images/issues/2<https://github.c...
to use UBI images for both Hive and Trino. But don’t get any attention on
https://github.com/RedHatInsights/ubi-hive/issues/8<https://github.com...
nor
https://github.com/RedHatInsights/ubi-hive/pull/9<https://github.com/R...
So I wonder what’s the suggested way to update these images?
_______________________________________________
Users mailing list --
users@lists.opendatahub.io<mailto:users@lists.opendatahub.io>
To unsubscribe send an email to
users-leave@lists.opendatahub.io<mailto:users-leave@lists.opendatahub.io>
--
Ricardo Martinelli De Oliveira
Senior Software Engineer, AI CoE
Red Hat Brazil<https://www.redhat.com/>
Av. Brigadeiro Faria Lima, 3900
8th floor
rmartine@redhat.com<mailto:rmartine@redhat.com> T:
+551135426125<tel:+551135426125>
M: +5511970696531<tel:+5511970696531>
@redhatjobs<https://twitter.com/redhatjobs>
redhatjobs<https://www.facebook.com/redhatjobs>
@redhatjobs<https://instagram.com/redhatjobs>