agreeable-beard-96538
02/01/2023, 12:46 PM-sqlite
tag was dropped). If I understand correctly, the idea was that the "standard" Keto image would include sqlite anyway, so there was no need to have two images.
However, in the -sqlite images, the Dockerfile created the destination directory /var/lib/sqlite and set the right permissions on it: https://github.com/ory/keto/blob/master/.docker/Dockerfile-sqlite#L21
This meant that a named volume mount to /var/lib/sqlite
would get the right permissions, and be writeable.
The newer images, e.g. v0.10.0, were built without these lines, and so the named volume is created at docker-runtime with root
ownership, and so the image doesn't run as expected.
The two solutions I can see are either:
1. build a -sqlite image using the separate Dockerfile, or
2. create the directory in the "standard" image, so the volume mount works as expected
what do you think?Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.
Powered by