{"action":"created","issue":{"url":"https://api.github.com/repos/drone/drone/issues/1492","repository_url":"https://api.github.com/repos/drone/drone","labels_url":"https://api.github.com/repos/drone/drone/issues/1492/labels{/name}","comments_url":"https://api.github.com/repos/drone/drone/issues/1492/comments","events_url":"https://api.github.com/repos/drone/drone/issues/1492/events","html_url":"https://github.com/drone/drone/issues/1492","id":134108635,"number":1492,"title":"drone-cli: Look into using user namespaces for `drone exec`","user":{"login":"gtaylor","id":75556,"avatar_url":"https://avatars.githubusercontent.com/u/75556?v=3","gravatar_id":"","url":"https://api.github.com/users/gtaylor","html_url":"https://github.com/gtaylor","followers_url":"https://api.github.com/users/gtaylor/followers","following_url":"https://api.github.com/users/gtaylor/following{/other_user}","gists_url":"https://api.github.com/users/gtaylor/gists{/gist_id}","starred_url":"https://api.github.com/users/gtaylor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gtaylor/subscriptions","organizations_url":"https://api.github.com/users/gtaylor/orgs","repos_url":"https://api.github.com/users/gtaylor/repos","events_url":"https://api.github.com/users/gtaylor/events{/privacy}","received_events_url":"https://api.github.com/users/gtaylor/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2016-02-16T22:00:53Z","updated_at":"2016-02-17T02:16:47Z","closed_at":null,"body":"Currently, `drone exec` is going to run against the directory that the `.drone.yml` resides in. If files are created, they are written as the user running the Docker daemon (almost always root).\r\n\r\nIt sounds like Docker's user namespaces could be worth looking into as a way to at least make the files modifiable/deletable by the local user."},"comment":{"url":"https://api.github.com/repos/drone/drone/issues/comments/184978736","html_url":"https://github.com/drone/drone/issues/1492#issuecomment-184978736","issue_url":"https://api.github.com/repos/drone/drone/issues/1492","id":184978736,"user":{"login":"bradrydzewski","id":817538,"avatar_url":"https://avatars.githubusercontent.com/u/817538?v=3","gravatar_id":"","url":"https://api.github.com/users/bradrydzewski","html_url":"https://github.com/bradrydzewski","followers_url":"https://api.github.com/users/bradrydzewski/followers","following_url":"https://api.github.com/users/bradrydzewski/following{/other_user}","gists_url":"https://api.github.com/users/bradrydzewski/gists{/gist_id}","starred_url":"https://api.github.com/users/bradrydzewski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradrydzewski/subscriptions","organizations_url":"https://api.github.com/users/bradrydzewski/orgs","repos_url":"https://api.github.com/users/bradrydzewski/repos","events_url":"https://api.github.com/users/bradrydzewski/events{/privacy}","received_events_url":"https://api.github.com/users/bradrydzewski/received_events","type":"User","site_admin":false},"created_at":"2016-02-17T02:16:47Z","updated_at":"2016-02-17T02:16:47Z","body":"actually my above comment might not be entirely correct, not sure creating a custom network solves this problem. We should also check and see what kubernetes is doing, because they work in a way that is similar to drone (from my understanding) https://github.com/kubernetes/kubernetes/blob/master/docs/design/networking.md#container-to-container"}}