diff options
Diffstat (limited to 'docker')
| -rw-r--r-- | docker/glance/glance-api/extend_start.sh | 1 | ||||
| -rw-r--r-- | docker/glance/glance-base/Dockerfile.j2 | 6 | ||||
| -rw-r--r-- | docker/glance/glance-base/glance_sudoers | 1 |
3 files changed, 7 insertions, 1 deletions
diff --git a/docker/glance/glance-api/extend_start.sh b/docker/glance/glance-api/extend_start.sh index 6f3cab830..4b99201c9 100644 --- a/docker/glance/glance-api/extend_start.sh +++ b/docker/glance/glance-api/extend_start.sh @@ -4,5 +4,6 @@ # of the KOLLA_BOOTSTRAP variable being set, including empty. if [[ "${!KOLLA_BOOTSTRAP[@]}" ]]; then glance-manage db_sync + sudo chown -R glance: /var/lib/glance/ exit 0 fi diff --git a/docker/glance/glance-base/Dockerfile.j2 b/docker/glance/glance-base/Dockerfile.j2 index 447c2d5b9..8f0cadfeb 100644 --- a/docker/glance/glance-base/Dockerfile.j2 +++ b/docker/glance/glance-base/Dockerfile.j2 @@ -44,4 +44,8 @@ RUN ln -s glance-base-source/* glance \ {% endif %} -RUN usermod -a -G kolla glance +COPY glance_sudoers /etc/sudoers.d/glance_sudoers + +RUN usermod -a -G kolla glance \ + && chmod 750 /etc/sudoers.d \ + && chmod 440 /etc/sudoers.d/glance_sudoers diff --git a/docker/glance/glance-base/glance_sudoers b/docker/glance/glance-base/glance_sudoers new file mode 100644 index 000000000..ffb536abf --- /dev/null +++ b/docker/glance/glance-base/glance_sudoers @@ -0,0 +1 @@ +%kolla ALL=(root) NOPASSWD: /usr/bin/chown -R glance\: /var/lib/glance/, /bin/chown -R glance\: /var/lib/glance/ |