Can't write cache permission denied!

[umlumpa]

FROM nginx-unit:8.0
WORKDIR /app

COPY ./app/backend /var/www/html

 COPY --from=frontend_build /app/src/frontend/assets/webpack/dist /var/www/html/src/frontend/assets/webpack/dist
 COPY --from=frontend_build /app/node_modules /var/www/html/node_modules
 COPY --from=composer /app/vendor /var/www/html/vendor

USER root
RUN chown -R 101:101 /var/www/html


WORKDIR /var/www/html

[tippexs]

Hi @umlumpa
Thanks for reaching out. Firstly. What image is that nginx-unit:8.0? It is not our official image and I just want to make sure you are aware of what Docker Image you are using.

Re your issue. We need more information to even guess what the issue will be.

What user is UID 101? Is that Unit? Please share your Unit configuration.
What kind of Application is that? PHP?

[umlumpa]

FROM php:8.0-cli-bullseye

RUN set -ex \
    && savedAptMark="$(apt-mark showmanual)" \
    && apt-get update \
    && apt-get install --no-install-recommends --no-install-suggests -y ca-certificates mercurial build-essential libssl-dev libpcre2-dev curl pkg-config \
    && mkdir -p /usr/lib/unit/modules /usr/lib/unit/debug-modules \
    && mkdir -p /usr/src/unit \
    && cd /usr/src/unit \
    && hg clone -u 1.31.1 https://hg.nginx.org/unit \
    && cd unit \
    && NCPU="$(getconf _NPROCESSORS_ONLN)" \
    && DEB_HOST_MULTIARCH="$(dpkg-architecture -q DEB_HOST_MULTIARCH)" \
    && CC_OPT="$(DEB_BUILD_MAINT_OPTIONS="hardening=+all,-pie" DEB_CFLAGS_MAINT_APPEND="-Wp,-D_FORTIFY_SOURCE=2 -fPIC" dpkg-buildflags --get CFLAGS)" \
    && LD_OPT="$(DEB_BUILD_MAINT_OPTIONS="hardening=+all,-pie" DEB_LDFLAGS_MAINT_APPEND="-Wl,--as-needed -pie" dpkg-buildflags --get LDFLAGS)" \
    && CONFIGURE_ARGS_MODULES="--prefix=/usr \
                --statedir=/var/lib/unit \
                --control=unix:/var/run/control.unit.sock \
                --runstatedir=/var/run \
                --pid=/var/run/unit.pid \
                --logdir=/var/log \
                --log=/var/log/unit.log \
                --tmpdir=/var/tmp \
                --user=unit \
                --group=unit \
                --openssl \
                --libdir=/usr/lib/$DEB_HOST_MULTIARCH" \
    && CONFIGURE_ARGS="$CONFIGURE_ARGS_MODULES \
                --njs" \
    && make -j $NCPU -C pkg/contrib .njs \
    && export PKG_CONFIG_PATH=$(pwd)/pkg/contrib/njs/build \
    && ./configure $CONFIGURE_ARGS --cc-opt="$CC_OPT" --ld-opt="$LD_OPT" --modulesdir=/usr/lib/unit/debug-modules --debug \
    && make -j $NCPU unitd \
    && install -pm755 build/sbin/unitd /usr/sbin/unitd-debug \
    && make clean \
    && ./configure $CONFIGURE_ARGS --cc-opt="$CC_OPT" --ld-opt="$LD_OPT" --modulesdir=/usr/lib/unit/modules \
    && make -j $NCPU unitd \
    && install -pm755 build/sbin/unitd /usr/sbin/unitd \
    && make clean \
    && /bin/true \
    && ./configure $CONFIGURE_ARGS_MODULES --cc-opt="$CC_OPT" --modulesdir=/usr/lib/unit/debug-modules --debug \
    && ./configure php \
    && make -j $NCPU php-install \
    && make clean \
    && ./configure $CONFIGURE_ARGS_MODULES --cc-opt="$CC_OPT" --modulesdir=/usr/lib/unit/modules \
    && ./configure php \
    && make -j $NCPU php-install \
    && cd \
    && rm -rf /usr/src/unit \
    && for f in /usr/sbin/unitd /usr/lib/unit/modules/*.unit.so; do \
        ldd $f | awk '/=>/{print $(NF-1)}' | while read n; do dpkg-query -S $n; done | sed 's/^\([^:]\+\):.*$/\1/' | sort | uniq >> /requirements.apt; \
       done \
    && apt-mark showmanual | xargs apt-mark auto > /dev/null \
    && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; } \
    && ldconfig \
    && mkdir -p /var/lib/unit/ \
    && mkdir -p /docker-entrypoint.d/ \
    && groupadd --gid 1000 unit \
    && useradd \
         --uid 1000 \
         --gid unit \
         --create-home \
         --home /home/unit \
         --comment "unit user" \
         --shell /bin/false \
         unit \
    && apt-get update \
    && apt-get --no-install-recommends --no-install-suggests -y install curl $(cat /requirements.apt) \
    && apt-get purge -y --auto-remove build-essential \
    && rm -rf /var/lib/apt/lists/* \
    && rm -f /requirements.apt \
    && ln -sf /dev/stdout /var/log/unit.log

ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/
RUN chmod uga+x /usr/local/bin/install-php-extensions && sync \
 && apt update && apt install -yq git openssh-client make nano jq

RUN pecl update-channels  \
    && install-php-extensions \
  ffi \
  opcache \
  zip \
  bcmath \
  intl \
  pdo_mysql \
  pdo_pgsql \
  @composer-2.6.2 \
  sockets
COPY docker-entrypoint.sh /usr/local/bin/

COPY prometheus.php /var/www/metrics/prometheus.php
COPY metrics.json /usr/share/unit/metrics.json
RUN chown -R unit:unit /var/www/metrics /usr/share/unit/metrics.json

STOPSIGNAL SIGTERM

ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
EXPOSE 80
CMD ["unitd", "--no-daemon", "--control", "unix:/var/run/control.unit.sock"]

here is my docker file its from official documentation
in normal php and nginx cache owners is www-data when
when i moved to nginx unit in kubernetes it doest create cache folder i dont understand why
my poststart exec command in kubernetes is:
composer du --no-interaction php yii migrate --interactive=0

[tippexs]

This looks very much like an issue with the permissions of the Docker Container image nothing related to Unit in specific. Anybody free to provide some guidance is free to jump in. Will not be free till later tonight to look at it. @javorszky WINK WINK :)

[javorszky]

Hey @umlumpa !

From what I can see you're telling docker to use the user root, and then immediately changing the permissions of all files and folders in /var/www/html to group 101 and user 101. Which is not root. It makes sense that docker / kubernetes would give you a permission denied error. Is there a guide you're following around setting user / group permissions and setting the current user to execute code within the image?

I assume this dockerfile is the FROM nginx-unit:8.0 in your first dockerfile definition.

What are the frontend_build and composer images?