DOdom_hutton·Jun 1, 2021
Personally I rely on boxboat/fixuid when thus is an issue for me.
Would love a real solution from docker though.
https://github.com/boxboat/fixuid
In File Permissions: A painful side of Docker (2019)boxboat
fixuid
Go2021–2021
boxboat / fixuid
fixuid
Go binary to change Docker container user/group and file permissions at runtime
3Distinct people
3Mentions
0Explicit recommenders
534GitHub stars
What to know before exploring
What it is
Go binary to change Docker container user/group and file permissions at runtime
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 12:54:37 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by hour3 dated mentions
Observed mentions: 2021-05-31 18:03:10 UTC to 2021-06-01 05:41:22 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| May 31, 18:00 | 2021-05-31 18:00:00 UTC | 2021-05-31 19:00:00 UTC | 1 | 0 | 1 |
| May 31, 19:00 | 2021-05-31 19:00:00 UTC | 2021-05-31 20:00:00 UTC | 0 | 0 | 0 |
| May 31, 20:00 | 2021-05-31 20:00:00 UTC | 2021-05-31 21:00:00 UTC | 0 | 0 | 0 |
| May 31, 21:00 | 2021-05-31 21:00:00 UTC | 2021-05-31 22:00:00 UTC | 0 | 0 | 0 |
| May 31, 22:00 | 2021-05-31 22:00:00 UTC | 2021-05-31 23:00:00 UTC | 0 | 0 | 0 |
| May 31, 23:00 | 2021-05-31 23:00:00 UTC | 2021-06-01 00:00:00 UTC | 1 | 0 | 1 |
| Jun 1, 00:00 | 2021-06-01 00:00:00 UTC | 2021-06-01 01:00:00 UTC | 0 | 0 | 0 |
| Jun 1, 01:00 | 2021-06-01 01:00:00 UTC | 2021-06-01 02:00:00 UTC | 0 | 0 | 0 |
| Jun 1, 02:00 | 2021-06-01 02:00:00 UTC | 2021-06-01 03:00:00 UTC | 0 | 0 | 0 |
| Jun 1, 03:00 | 2021-06-01 03:00:00 UTC | 2021-06-01 04:00:00 UTC | 0 | 0 | 0 |
| Jun 1, 04:00 | 2021-06-01 04:00:00 UTC | 2021-06-01 05:00:00 UTC | 0 | 0 | 0 |
| Jun 1, 05:00 | 2021-06-01 05:00:00 UTC | 2021-06-01 06:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
3 sourcesFor the local development scenario, I made an open source utility that uses the setuid bit to change the UID/GID of a particular user and any files that user owns inside of the container at runtime:
https://github.com/boxboat/fixuid
In File Permissions: A painful side of Docker (2019)Recently ran into this. So far I've landed on `setfacl`
- `--user` didn't work for me because there were root permissions in my image
- I didn't dig into why `userns-remap` didn't work
- I didn't give https://github.com/boxboat/fixuid a try yet
Some notes from my experience
setfacl -dm "u:alexandros:rw" ~/alpine
should be
setfacl -R -dm "u:alexandros:rwx" ~/alpine
In case:
- `-R`: There is existing content in `~/alpine` you want made avalable
- `x`: You want your container to be able to create directories
However, you can still run into problems if
- Your container copies data from outside your bind-mount to inside. It sort-of worked except somehow the mask was `r--`, making things lose writeable.
- Your container moves data from outside your bind-mount to inside. This fully preserves the permissions.
I ended up creating a `.keep`
Read the rest
file in the bind mount and doing a `cp --attributes-only --preserve=mode,ownership,xattr .keep <target>`