From a9bbdc4d55a5793cd9a8ff1ed308d4625629f4f4 Mon Sep 17 00:00:00 2001 From: Fabricio Henrique Ramos Date: Tue, 1 Feb 2022 19:45:25 -0300 Subject: [PATCH] Debian: Remove user directive from docker-registry service By removing: User=docker-registry the service now runs as user root which allows ansible to use the registry without hitting permissions issues. Test Plan: Pass: Execute ansible playbook in Debian OS Pass: Service is active (running) after ansible playbook Story: 2009101 Task: 44419 Signed-off-by: Fabricio Henrique Ramos Change-Id: I06f3b0ed19d60400630bd01d3ae115fe44b6582b --- ...Remove-User-directive-from-unit-file.patch | 30 +++++++++++++++++++ .../debian/deb_patches/series | 1 + 2 files changed, 31 insertions(+) create mode 100644 kubernetes/docker-distribution/debian/deb_patches/0004-Remove-User-directive-from-unit-file.patch diff --git a/kubernetes/docker-distribution/debian/deb_patches/0004-Remove-User-directive-from-unit-file.patch b/kubernetes/docker-distribution/debian/deb_patches/0004-Remove-User-directive-from-unit-file.patch new file mode 100644 index 000000000..0f468d805 --- /dev/null +++ b/kubernetes/docker-distribution/debian/deb_patches/0004-Remove-User-directive-from-unit-file.patch @@ -0,0 +1,30 @@ +From 1f52f7857bdfd54af3409f0dc4a56ed866582327 Mon Sep 17 00:00:00 2001 +From: Fabricio Henrique Ramos +Date: Fri, 28 Jan 2022 16:31:00 -0300 +Subject: [PATCH] Remove User directive from unit file + +By removing: +User=docker-registry +the service now runs as user root which allows ansible to use the +registry without hitting permissions issues. + +Signed-off-by: Fabricio Henrique Ramos +--- + debian/docker-registry.service | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/debian/docker-registry.service b/debian/docker-registry.service +index a2feaa6..a4652b3 100644 +--- a/debian/docker-registry.service ++++ b/debian/docker-registry.service +@@ -3,7 +3,6 @@ Description=the Docker toolset to pack, ship, store, and deliver content + After=network.target + + [Service] +-User=docker-registry + Type=simple + Environment=REGISTRY_STORAGE_DELETE_ENABLED=true + ExecStart=/usr/bin/docker-registry serve /etc/docker-distribution/registry/config.yml +-- +2.17.1 + diff --git a/kubernetes/docker-distribution/debian/deb_patches/series b/kubernetes/docker-distribution/debian/deb_patches/series index 4906314e1..2a4f0831a 100644 --- a/kubernetes/docker-distribution/debian/deb_patches/series +++ b/kubernetes/docker-distribution/debian/deb_patches/series @@ -1,3 +1,4 @@ 0001-update-paths-and-service.patch 0002-no-gecos.patch 0003-Override-docker-registry-service.patch +0004-Remove-User-directive-from-unit-file.patch