Skip to content

Security Center images require root to run #38

@mkborland

Description

@mkborland

Im trying to deploy the Security Center helm chart in a cluster that requires containers to be non-root.
I tried changing the Security Center securityContext to non-root (1000:1000) and it failed with permission denied.

sc-runtime-container logs:

/scbase/SecurityCenter: line 33: /opt/sc/.scenv: No such file or directory                                                                                                                                                                                                                                                                                                                                                                                
Checking for SecurityCenter upgrade in progress:                                                                                                                                                                                                                                                                                                                                                                                                          
Checking for active migration:                                                                                                                                                                                                                                                                                                                                                                                                                            
/bin/bash: line 1: /support/bin/php: No such file or directory                                                                                                                                                                                                                                                                                                                                                                                            
Installing software updates if availableError installing software updates.                                                                                                                                                                                                                                                                                                                                                                                
[FAILED]                                                                                                                                                                                                                                                                                                                                                                                                                                                  
/etc/ssh/sshd_config: Permission denied 

Is there a way to run this without root or is it required?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions