From e62025d16188dc213f308579f8683401d6ead8ad Mon Sep 17 00:00:00 2001 From: Michael Pilosov <40366263+mathematicalmichael@users.noreply.github.com> Date: Sat, 11 Jul 2020 11:17:58 -0600 Subject: [PATCH 1/3] ensure correct permissions (enforced) increases robustness to permissions in root image --- .build/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.build/Dockerfile b/.build/Dockerfile index 596360e..e0ff005 100755 --- a/.build/Dockerfile +++ b/.build/Dockerfile @@ -27,7 +27,7 @@ ARG NB_GID="100" SHELL ["/bin/bash", "-o", "pipefail", "-c"] USER root - +RUN chmod 1777 /tmp && chmod 1777 /var/tmp # Install all OS dependencies for notebook server that starts but lacks all # features (e.g., download as all possible file formats) ENV DEBIAN_FRONTEND noninteractive From b3b1d39cc97c47ed8d8d11b7a6867f093e8b9529 Mon Sep 17 00:00:00 2001 From: Michael Pilosov Date: Sat, 11 Jul 2020 12:26:25 -0600 Subject: [PATCH 2/3] Revert "ensure correct permissions (enforced)" This reverts commit e62025d16188dc213f308579f8683401d6ead8ad. --- .build/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.build/Dockerfile b/.build/Dockerfile index e0ff005..596360e 100755 --- a/.build/Dockerfile +++ b/.build/Dockerfile @@ -27,7 +27,7 @@ ARG NB_GID="100" SHELL ["/bin/bash", "-o", "pipefail", "-c"] USER root -RUN chmod 1777 /tmp && chmod 1777 /var/tmp + # Install all OS dependencies for notebook server that starts but lacks all # features (e.g., download as all possible file formats) ENV DEBIAN_FRONTEND noninteractive From 298bf8a8337e4aaa0bec409c1ec794827feee3f9 Mon Sep 17 00:00:00 2001 From: Michael Pilosov Date: Sat, 11 Jul 2020 12:28:33 -0600 Subject: [PATCH 3/3] append instruction to header. --- src/Dockerfile.header | 1 + 1 file changed, 1 insertion(+) diff --git a/src/Dockerfile.header b/src/Dockerfile.header index e8c9dfd..12eaf63 100644 --- a/src/Dockerfile.header +++ b/src/Dockerfile.header @@ -3,3 +3,4 @@ FROM nvidia/cuda:10.1-base-ubuntu18.04 LABEL maintainer="Christoph Schranz " # This is a concatenated Dockerfile, the maintainers of subsequent sections may vary. +RUN chmod 1777 /tmp && chmod 1777 /var/tmp