ynput / ynput/ash

Push ash worker user down the service

Open
#18 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
3
Forks
6
Avg merge
11m
Merged PRs (30d)
1

Description

Is your feature request related to a problem? Please describe.
Currently if service (that is being triggered by Ash) is running as root (unless user is created - hardcoded- in service Dockerfile).

This could cause an permission issue in services that are using mounted volumes. (Eg. service is mounting studio drive where it publishes, published files from that service have user 'root' which could be troublesome.)

Describe the solution you'd like
It could be beneficial to have toggle that would control if underlaying service should be inheriting user that Ash worker is running. That way studios could easily control permissions by just changing who is running Ash service.

Another option would be providing field/env var that could be used to provide different user name (that is existing on an environment that ash worker is running.)

Additional context
It looks that orchestrators could control users that are running their started service by --user flag. I am not sure if it is really the case. My described solution comes from this notion.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing how Ash launches the underlying service and how the service Dockerfile and orchestrator invocation handle the user. Compare the proposed inherited-user toggle with an explicit user name or environment setting, including the --user behavior mentioned in the issue. Done means one supported, documented way to control the service user and verified permissions for mounted volumes.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, python
Domain
devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.