This commit is contained in:
parent
8e6d5c860a
commit
780a313437
|
@ -3,9 +3,7 @@ MAINTAINER Liang Ding <dl88250@gmail.com>
|
||||||
|
|
||||||
ADD . /wide/gogogo/src/github.com/b3log/wide
|
ADD . /wide/gogogo/src/github.com/b3log/wide
|
||||||
|
|
||||||
RUN useradd wide && chown -R wide:wide /wide && useradd wide_runner
|
RUN useradd runner
|
||||||
|
|
||||||
USER wide
|
|
||||||
|
|
||||||
ENV GOROOT /usr/src/go
|
ENV GOROOT /usr/src/go
|
||||||
ENV GOPATH /wide/gogogo
|
ENV GOPATH /wide/gogogo
|
||||||
|
|
|
@ -110,12 +110,12 @@ func RunHandler(w http.ResponseWriter, r *http.Request) {
|
||||||
cmd.SysProcAttr = &syscall.SysProcAttr{}
|
cmd.SysProcAttr = &syscall.SysProcAttr{}
|
||||||
cmd.SysProcAttr.Cloneflags = syscall.CLONE_NEWUSER | syscall.CLONE_NEWNS | syscall.CLONE_NEWUTS | syscall.CLONE_NEWPID | syscall.CLONE_NEWIPC | syscall.CLONE_NEWNET
|
cmd.SysProcAttr.Cloneflags = syscall.CLONE_NEWUSER | syscall.CLONE_NEWNS | syscall.CLONE_NEWUTS | syscall.CLONE_NEWPID | syscall.CLONE_NEWIPC | syscall.CLONE_NEWNET
|
||||||
cmd.SysProcAttr.Credential = &syscall.Credential{
|
cmd.SysProcAttr.Credential = &syscall.Credential{
|
||||||
Uid: 1001,
|
Uid: 0,
|
||||||
Gid: 1001,
|
Gid: 0,
|
||||||
}
|
}
|
||||||
|
|
||||||
cmd.SysProcAttr.UidMappings = []syscall.SysProcIDMap{{ContainerID: 1001, HostID: 1001, Size: 1}}
|
cmd.SysProcAttr.UidMappings = []syscall.SysProcIDMap{{ContainerID: 0, HostID: 1000, Size: 1}}
|
||||||
cmd.SysProcAttr.GidMappings = []syscall.SysProcIDMap{{ContainerID: 1001, HostID: 1001, Size: 1}}
|
cmd.SysProcAttr.GidMappings = []syscall.SysProcIDMap{{ContainerID: 0, HostID: 1000, Size: 1}}
|
||||||
|
|
||||||
stdout, err := cmd.StdoutPipe()
|
stdout, err := cmd.StdoutPipe()
|
||||||
if nil != err {
|
if nil != err {
|
||||||
|
|
Loading…
Reference in New Issue