Cp-docker-images: /var/lib/kafka permissions

[fritchie]

I am unable to run a container using the cp-kafka 5.1.1 image as a non-root user when using a host volume for /var/lib/kafka/data as shown here:

https://github.com/confluentinc/cp-docker-images/blob/3.1.x/tests/fixtures/debian/kafka/standalone-config.yml#L186-L208

This is due to /var/lib/kafka in the image being owned by root and having perms 750. /var/lib/zookeeper has the same issue. Changing perms to 755 may solve the issue.

[t-hale]

👍 - I have a similar issue at my company where running containers as non-root users isn't allowed due to company-wide security policy. Changing this to 755 - or even better - changing to being owned by something like nobody or daemon would allow us to more easily integrate your images in our environment.

[dylanmei]

One approach is to build an image from cp-kafka as a base: https://github.com/Nordstrom/docker-confluent/blob/5.1.0/broker/Dockerfile#L5

[tomikmar]

We have the same issue (when running as non-root). Caused by:

# ls -ld /var/lib/kafka
drwxr-x--- 3 root root 4096 Jun 19 00:27 /var/lib/kafka

[abbi1680]

Hi,
Can anyone tell me what is the root password for confluent kafka images. I'm trying to install some packages and don't know the rootpassword