https://pantsbuild.org/ logo
Join Slack
Powered by
It seems that if you have a pex_binary that uses t...
# general
a
It seems that if you have a pex_binary that uses the loose layout and you use the new docker environment you get a very cryptic error 
Error expanding output globs: Permission denied (os error 13)
h
Sorry for the trouble, and thanks for the bug report!
a
It's expected its a brand new feature on an unstable version, no need to apologise haha
h
And thanks for the other bug reports! As you say, new feature, so chaos...
e
I'm pretty sure both of the bugs you hit @average-flag-94768 are due to a lack of attempting to handle the user executing docker actions (you) vs the user in the container image - typically 
root
. I've gedankened this then found code to back up the guess on the tickets.
@happy-kitchen-89482 it seemed clear to me a week ago 2.15.x should be divorced from a feature. This just makes it more clear. This is presumably broken for ~every Linux docker image + host.
a
Yeah that seems likely it's a classic executing in docker issue IMO, I normally have to do very ill advised things with permissions when mounting stuff into docker containers by hand to get round this.
e
Yup, exactly.
I did this in Pex a long time ago to ~generically work around this issue: + https://github.com/pantsbuild/pex/blob/main/docker/user/Dockerfile + https://github.com/pantsbuild/pex/blob/main/docker/user/create_docker_image_user.sh Basically take any existing image and make it have a user that matches me.
Pants could do something similar here or it could just try getting away with actually passing uid:gid.
The image shim trick - which is I think basically all MS dev containers are - is trickier on a generic image since you don't know for sure what user and group administration commands exist in the base image. That varies per distro, and the commands might not exist at all for a containerless style super-slim image.
a
That is a really neat trick
It also highlights the one weakness I think the current docker support has which is support for runtime build args that aren't env vars. I mean env vars do work, but they make explaining how to build a docker image to a member of a team very onerous, or require a wrapper script which annoys me as I feel the way pants could let any dev checkout the code and do 
pants lint test package publish ::
is amazing and I don't want to add any more complexity to that command unless super neccesary.
Open in Slack
PreviousNext
Powered by