Skip to content

fix: pin myuser UID/GID to 990 to prevent drift#288

Open
janbuchar wants to merge 1 commit into
masterfrom
fix/287-pin-myuser-uid-gid
Open

fix: pin myuser UID/GID to 990 to prevent drift#288
janbuchar wants to merge 1 commit into
masterfrom
fix/287-pin-myuser-uid-gid

Conversation

@janbuchar
Copy link
Copy Markdown
Contributor

@janbuchar janbuchar commented Apr 24, 2026

  • Pin myuser UID and GID to 990 in all 6 Node.js Dockerfiles that create this user

  • Previously, groupadd -r / useradd -r auto-assigned system IDs that could shift between builds when base images add/remove system users (e.g. messagebus)

  • This caused silent permission breakage on persistent volume mounts

  • closes Floating UID and GID in Dockerfile #287

@github-actions github-actions Bot added this to the 139th sprint - Tooling team milestone Apr 24, 2026
@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Apr 24, 2026
The myuser account was created with `groupadd -r` and `useradd -r` which
auto-assign system IDs counting downward from 999. When base images add
or remove system users, the auto-assigned ID shifts, breaking persistent
volume mounts that depend on a stable UID/GID.

Pin both UID and GID to 990 across all 6 affected Dockerfiles.

- closes #287
@janbuchar janbuchar requested a review from vladfrangu April 24, 2026 09:22
@janbuchar janbuchar force-pushed the fix/287-pin-myuser-uid-gid branch from d810771 to e402744 Compare April 24, 2026 09:23
@janbuchar janbuchar changed the title fix(docker): pin myuser UID/GID to 990 to prevent drift fix: pin myuser UID/GID to 990 to prevent drift Apr 24, 2026
Copy link
Copy Markdown
Member

@vladfrangu vladfrangu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's a bunch more images that need this 🙏

@janbuchar
Copy link
Copy Markdown
Contributor Author

There's a bunch more images that need this 🙏

Right, but only these 6 create myuser. So should I start doing that everywhere?

@vladfrangu
Copy link
Copy Markdown
Member

At least from a quick glance all images make myuser

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Floating UID and GID in Dockerfile

3 participants