From d0c714bba0ff2fd878e490f9468285352039daff Mon Sep 17 00:00:00 2001 From: Todd Baert Date: Fri, 24 Jul 2026 14:49:23 -0400 Subject: [PATCH 1/2] fix: run testbed image as root to support bind-mounted /flags Signed-off-by: Todd Baert --- flagd/Dockerfile | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/flagd/Dockerfile b/flagd/Dockerfile index ec677b1..ce791c3 100644 --- a/flagd/Dockerfile +++ b/flagd/Dockerfile @@ -42,10 +42,10 @@ COPY --from=certs custom-root-cert.crt /ssl/ RUN mkdir "flags" -# run as non-root -RUN adduser -D -H -u 10001 testbed \ - && chown -R testbed:testbed /flags /rawflags /configs /ssl -USER testbed +# NOTE: intentionally runs as root. launchpad writes generated flag configs into +# /flags, which consumers bind-mount from host dirs of arbitrary ownership (see +# docker-compose.yaml); a non-root user cannot write there. This is a test-only +# fixture, not a deployed workload. LABEL org.opencontainers.image.source="https://github.com/open-feature/flagd-testbed" From 5c5f596a226c2b73da9392dc92e38627d969e5c7 Mon Sep 17 00:00:00 2001 From: Todd Baert Date: Fri, 24 Jul 2026 14:54:00 -0400 Subject: [PATCH 2/2] Clean up comments in Dockerfile Removed comments about running as root in Dockerfile. Signed-off-by: Todd Baert --- flagd/Dockerfile | 6 ------ 1 file changed, 6 deletions(-) diff --git a/flagd/Dockerfile b/flagd/Dockerfile index ce791c3..bdfab1f 100644 --- a/flagd/Dockerfile +++ b/flagd/Dockerfile @@ -42,12 +42,6 @@ COPY --from=certs custom-root-cert.crt /ssl/ RUN mkdir "flags" -# NOTE: intentionally runs as root. launchpad writes generated flag configs into -# /flags, which consumers bind-mount from host dirs of arbitrary ownership (see -# docker-compose.yaml); a non-root user cannot write there. This is a test-only -# fixture, not a deployed workload. - - LABEL org.opencontainers.image.source="https://github.com/open-feature/flagd-testbed" ENTRYPOINT ["./launchpad"]