Comment on [beta] degoog - search engine aggregator

• KarnaSubarna@lemmy.ml ⁨1⁩ ⁨month⁩ ago

  Note that I’m running it on a rootless docker instance, and NOT on Podman. So, the following solution might or might not work for you.

  services:
    degoog:
      image: ghcr.io/fccview/degoog:latest
      volumes:
        - ./.data:/app/data
      user: "0:0"
      ports:
        - "4444:4444"
      restart: unless-stopped
  

  Explanation: rootless docker works a bit different from rootful docker. user 1000 (which is you on your server/machine) will be mapped to a different UID (e.g. 32555). This is to ensure that any process in docker container can’t have access to folders/files that you have access to, in case it manages to break free of docker containerization.

  When you put user: “0:0” in a rootless docker container, it will assume your UID 1000 (which is you on your server/machine) inside docker container.

  While it solves the file permission issue, but it is NOT a recommended way.

  with user:1000:1000

  Image

  with user:0:0

  Image

  source

  • thestrike@lemmy.blahaj.zone ⁨1⁩ ⁨month⁩ ago

    Is there a recommended way to do it? Could I give file permissions to the UID that docker has or something? Or put docker in the same user group as me

    source