tree df981cda1916a3678df1f03853bf7ce96c7c03ee
parent 211fff4f5f9622419eadf2713d47b3ca8160acc1
author Marc Kupietz <kupietz@ids-mannheim.de> 1785466423 +0900
committer Marc Kupietz <kupietz@ids-mannheim.de> 1785466423 +0900

Docker: let the image run as any user

The image only started as root: Inline aborts with "Couldn't find an
appropriate DIRECTORY for Inline to use" when /derekovecs/_Inline is not
writable, and there is no compiler left in the image to build the XS part
somewhere else.

That rules out deployments whose models come from an NFS export with
root_squash, where the container has to run as the owning user. Making the
Inline cache writable for everybody is enough, the code directory stays
untouched. Verified with --user: the image serves neighbours and count based
collocators with the models mounted read only.

The hypnotoad pid file is written relative to the working directory, so such a
deployment should set pid_file to an absolute path outside of it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Change-Id: I28a91d65f208250d3adb4b4a923198c37211f81b