User Level Permissions by Default? about dip

[bibendi]

Hi @erwin
I'm so sorry for the long response. It looks like I missed your issue.

I like your proposal. It seems we can pass a --user option https://docs.docker.com/engine/reference/commandline/compose_run/

So we can try to implement something like the following:

# dip.yml

interaction:
  cmd:
    service: backend
    command: foo
    run_as_me: true

where run_as_me will be converted into docker compose run --user $(id -u):$(id -g)

We should be careful because I don't have the problem with permissions on Docker for Mac, so maybe we should skip this option.

Update: after writing the text above, I realized that it won't work with dip compose up some-service.
I found an interesting post https://medium.com/redbubble/running-a-docker-container-as-a-non-root-user-7d2e00f8ee15

So, we can add a separate docker-compose.linux.yml https://github.com/bibendi/dip#dip_os with:

services:
  app:
    user: ${DIP_CURRENT_USER}

add it to a dip.yml

compose:
  files:
    - docker-compose.yml
    - docker-compose.${DIP_OS}.yml

and implement DIP_CURRENT_USER here

dip/lib/dip/environment.rb

Lines 53 to 57 in f13cd6f

	def special_vars
	@special_vars ||= SPECIAL_VARS.each_with_object({}) do |key, memo|
	memo["DIP_#{key.to_s.upcase}"] = "find_#{key}"
	end
	end

or you can add it to your ~/.zshrc

DIP_CURRENT_USER=$(id -u):$(id -g)