From f093ff2c7df479c3b79718c2510034103a3b4ec3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Steffen?= Date: Wed, 20 May 2020 12:40:02 +0200 Subject: [PATCH 1/2] Take over user groups when running container --- userdocker/subcommands/run.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/userdocker/subcommands/run.py b/userdocker/subcommands/run.py index 981a685..ed95605 100644 --- a/userdocker/subcommands/run.py +++ b/userdocker/subcommands/run.py @@ -264,6 +264,10 @@ def exec_cmd_run(args): if USER_IN_CONTAINER: cmd += ["-u", "%d:%d" % (uid, gid)] + for _g in gids: + if _g < 1000 or _g == gid: + continue + cmd += ["--group-add", "%d" % (_g)] for cap_drop in CAPS_DROP: cmd += ["--cap-drop=%s" % cap_drop] From eb3b6a2421ca392ec4485744244d913e51687040 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Steffen?= Date: Wed, 20 May 2020 13:05:40 +0200 Subject: [PATCH 2/2] Add missing import of gids --- userdocker/subcommands/run.py | 1 + 1 file changed, 1 insertion(+) diff --git a/userdocker/subcommands/run.py b/userdocker/subcommands/run.py index ed95605..f04b2ef 100644 --- a/userdocker/subcommands/run.py +++ b/userdocker/subcommands/run.py @@ -23,6 +23,7 @@ from ..config import VOLUME_MOUNTS_AVAILABLE from ..config import VOLUME_MOUNTS_DEFAULT from ..config import gid +from ..config import gids from ..config import uid from ..config import user_name from ..helpers.cmd import init_cmd