Skip to content

Conversation

jennydaman
Copy link

Motivation

In high-security Kubernetes, e.g. OpenShift, the container user has an arbitrary underprivileged UID which (for all intents and purposes) means the filesystem is read-only. At runtime, Ackee wants to create the file dist/index.html which may not be possible if the container user is underprivileged.

What Was Changed

Build files that are identical on every installation are moved to a directory called public. build.js now copies files from public to dist. In effect, at runtime public may be a read-only directory while dist can be fully read-write.

This enables us to deploy Ackee on OpenShift by using an emptyDir volume mounted on /srv/app/dist (see also: jennydaman/suda-charts@9719c86)

Copy link

vercel bot commented Dec 12, 2023

Someone is attempting to deploy a commit to a Personal Account owned by @electerious on Vercel.

@electerious first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant