fix: Run dev container as host UID/GID #4

Merged
nrupard merged 1 commit from fix/non-root-docker-user into main 2026-05-04 21:29:44 +02:00
Owner

Bind-mount writes from dx serve previously landed as root on the host, blocking non-root deletion. The dev image now creates a dev user with the host's UID/GID at build time, runs the container under that user via compose user:, and the justfile passes HOST_UID/HOST_GID (the standard UID/GID names are readonly in bash and cannot be exported to compose).

Files written by the container into the bind-mounted source tree are now owned by the invoking host user.

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

Bind-mount writes from `dx serve` previously landed as root on the host, blocking non-root deletion. The dev image now creates a `dev` user with the host's UID/GID at build time, runs the container under that user via compose `user:`, and the justfile passes `HOST_UID`/`HOST_GID` (the standard `UID`/`GID` names are readonly in bash and cannot be exported to compose). Files written by the container into the bind-mounted source tree are now owned by the invoking host user. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
fix: Run dev container as host UID/GID
Some checks failed
Create release / Create release from merged PR (pull_request) Has been cancelled
e2c4b6fdb5
Bind-mount writes from `dx serve` previously landed as root on the host, blocking non-root deletion. The dev image now creates a `dev` user with the host's UID/GID at build time, runs the container under that user via compose `user:`, and the justfile passes `HOST_UID`/`HOST_GID` (the standard `UID`/`GID` names are readonly in bash and cannot be exported to compose).

Files written by the container into the bind-mounted source tree are now owned by the invoking host user.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
nrupard deleted branch fix/non-root-docker-user 2026-05-04 21:29:45 +02:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
psa-systems/mokosh-apps!4
No description provided.