{"action":"created","issue":{"url":"https://api.github.com/repos/blablacar/dgr/issues/152","repository_url":"https://api.github.com/repos/blablacar/dgr","labels_url":"https://api.github.com/repos/blablacar/dgr/issues/152/labels{/name}","comments_url":"https://api.github.com/repos/blablacar/dgr/issues/152/comments","events_url":"https://api.github.com/repos/blablacar/dgr/issues/152/events","html_url":"https://github.com/blablacar/dgr/issues/152","id":148866422,"number":152,"title":"Run a pod with a specific user (non-root)","user":{"login":"zeysh","id":794625,"avatar_url":"https://avatars.githubusercontent.com/u/794625?v=3","gravatar_id":"","url":"https://api.github.com/users/zeysh","html_url":"https://github.com/zeysh","followers_url":"https://api.github.com/users/zeysh/followers","following_url":"https://api.github.com/users/zeysh/following{/other_user}","gists_url":"https://api.github.com/users/zeysh/gists{/gist_id}","starred_url":"https://api.github.com/users/zeysh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zeysh/subscriptions","organizations_url":"https://api.github.com/users/zeysh/orgs","repos_url":"https://api.github.com/users/zeysh/repos","events_url":"https://api.github.com/users/zeysh/events{/privacy}","received_events_url":"https://api.github.com/users/zeysh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-04-16T16:12:40Z","updated_at":"2016-05-03T08:17:25Z","closed_at":null,"body":"Hi,\r\n\r\nIs there a way to run a pod with a dedicated user ?\r\nSomething similar to \"set-user\" with acbuild.\r\n\r\nMany thanks.\r\n"},"comment":{"url":"https://api.github.com/repos/blablacar/dgr/issues/comments/216465297","html_url":"https://github.com/blablacar/dgr/issues/152#issuecomment-216465297","issue_url":"https://api.github.com/repos/blablacar/dgr/issues/152","id":216465297,"user":{"login":"zeysh","id":794625,"avatar_url":"https://avatars.githubusercontent.com/u/794625?v=3","gravatar_id":"","url":"https://api.github.com/users/zeysh","html_url":"https://github.com/zeysh","followers_url":"https://api.github.com/users/zeysh/followers","following_url":"https://api.github.com/users/zeysh/following{/other_user}","gists_url":"https://api.github.com/users/zeysh/gists{/gist_id}","starred_url":"https://api.github.com/users/zeysh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zeysh/subscriptions","organizations_url":"https://api.github.com/users/zeysh/orgs","repos_url":"https://api.github.com/users/zeysh/repos","events_url":"https://api.github.com/users/zeysh/events{/privacy}","received_events_url":"https://api.github.com/users/zeysh/received_events","type":"User","site_admin":false},"created_at":"2016-05-03T08:17:25Z","updated_at":"2016-05-03T08:17:25Z","body":"Hi @n0rad,\r\n\r\nThanks for your reply.\r\nAfter some tests, I probably miss something...\r\n\r\nHere the manifest\r\n```\r\nname: domain.net/elasticsearch:2.3.2\r\naci:\r\n  dependencies:\r\n    - domain.net/aci-base\r\n    - domain.net/alpine-base\r\n    - domain.net/alpine-java7\r\n  app:\r\n    user: \"0\"\r\n    group: \"0\"\r\n    exec: [ /opt/elasticsearch-2.3.2/bin/elasticsearch ]\r\n    workingDirectory: /opt/elasticsearch-2.3.2/bin\r\n    mountPoints:\r\n      - {name: data, path: /var/lib/elasticsearch, readOnly: false}\r\n      - {name: config, path: /opt/elasticsearch-2.3.2/config, readOnly: false}\r\n```\r\n\r\nWhen I run my aci image with --user=1000 I got this issue\r\n```\r\nsudo rkt run --insecure-options=image target/image.aci --user=1000\r\n...\r\n[ 5943.720229] elasticsearch[5]: chmod: /dgr/runlevels/prestart-early/00.early.sh: Operation not permitted\r\n```\r\n\r\nAny idea ?\r\nMany thanks\r\n"}}