diff --git a/.github/workflows/mint/minio-compress-encrypt.yaml b/.github/workflows/mint/minio-compress-encrypt.yaml index 0ebaacb99..fe1238e80 100644 --- a/.github/workflows/mint/minio-compress-encrypt.yaml +++ b/.github/workflows/mint/minio-compress-encrypt.yaml @@ -16,10 +16,10 @@ x-minio-common: &minio-common MINIO_COMPRESSION_ALLOW_ENCRYPTION: "on" MINIO_KMS_SECRET_KEY: "my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=" healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"] - interval: 30s - timeout: 20s - retries: 3 + test: ["CMD", "mc", "ready", "local"] + interval: 5s + timeout: 5s + retries: 5 # starts 4 docker containers running minio server instances. # using nginx reverse proxy, load balancing, you can access diff --git a/.github/workflows/mint/minio-erasure.yaml b/.github/workflows/mint/minio-erasure.yaml index e28c137d6..a3fd6dbc0 100644 --- a/.github/workflows/mint/minio-erasure.yaml +++ b/.github/workflows/mint/minio-erasure.yaml @@ -13,10 +13,10 @@ x-minio-common: &minio-common MINIO_ROOT_PASSWORD: "minio123" MINIO_KMS_SECRET_KEY: "my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=" healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"] - interval: 30s - timeout: 20s - retries: 3 + test: ["CMD", "mc", "ready", "local"] + interval: 5s + timeout: 5s + retries: 5 # starts 4 docker containers running minio server instances. # using nginx reverse proxy, load balancing, you can access diff --git a/.github/workflows/mint/minio-pools.yaml b/.github/workflows/mint/minio-pools.yaml index 0a54ca353..bd79fdae0 100644 --- a/.github/workflows/mint/minio-pools.yaml +++ b/.github/workflows/mint/minio-pools.yaml @@ -13,10 +13,10 @@ x-minio-common: &minio-common MINIO_ROOT_PASSWORD: "minio123" MINIO_KMS_SECRET_KEY: "my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=" healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"] - interval: 30s - timeout: 20s - retries: 3 + test: ["CMD", "mc", "ready", "local"] + interval: 5s + timeout: 5s + retries: 5 # starts 4 docker containers running minio server instances. # using nginx reverse proxy, load balancing, you can access diff --git a/.gitignore b/.gitignore index 5d277b10d..b226c380b 100644 --- a/.gitignore +++ b/.gitignore @@ -42,3 +42,4 @@ docs/debugging/healing-bin/healing-bin docs/debugging/inspect/inspect docs/debugging/pprofgoparser/pprofgoparser docs/debugging/reorder-disks/reorder-disks +docs/debugging/populate-hard-links/populate-hardlinks diff --git a/buildscripts/upgrade-tests/compose.yml b/buildscripts/upgrade-tests/compose.yml index 1bdff40f0..d70d443d0 100644 --- a/buildscripts/upgrade-tests/compose.yml +++ b/buildscripts/upgrade-tests/compose.yml @@ -9,11 +9,6 @@ x-minio-common: &minio-common expose: - "9000" - "9001" - healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"] - interval: 30s - timeout: 20s - retries: 3 # starts 4 docker containers running minio server instances. # using nginx reverse proxy, load balancing, you can access diff --git a/dockerscripts/docker-entrypoint.sh b/dockerscripts/docker-entrypoint.sh index 0e2bdb5a2..bd617cb83 100755 --- a/dockerscripts/docker-entrypoint.sh +++ b/dockerscripts/docker-entrypoint.sh @@ -8,22 +8,19 @@ if [ "${1}" != "minio" ]; then fi fi -# su-exec to requested user, if service cannot run exec will fail. docker_switch_user() { if [ -n "${MINIO_USERNAME}" ] && [ -n "${MINIO_GROUPNAME}" ]; then if [ -n "${MINIO_UID}" ] && [ -n "${MINIO_GID}" ]; then - groupadd -f -g "$MINIO_GID" "$MINIO_GROUPNAME" && - useradd -u "$MINIO_UID" -g "$MINIO_GROUPNAME" "$MINIO_USERNAME" + chroot --userspec=${MINIO_UID}:${MINIO_GID} / "$@" else - groupadd -f "$MINIO_GROUPNAME" && - useradd -g "$MINIO_GROUPNAME" "$MINIO_USERNAME" + echo "${MINIO_USERNAME}:x:1000:1000:${MINIO_USERNAME}:/:/sbin/nologin" >>/etc/passwd + echo "${MINIO_GROUPNAME}:x:1000" >>/etc/group + chroot --userspec=${MINIO_USERNAME}:${MINIO_GROUPNAME} / "$@" fi - exec setpriv --reuid="${MINIO_USERNAME}" \ - --regid="${MINIO_GROUPNAME}" --keep-groups "$@" else exec "$@" fi } -## Switch to user if applicable. +## DEPRECATED and unsupported - switch to user if applicable. docker_switch_user "$@" diff --git a/docs/orchestration/docker-compose/docker-compose.yaml b/docs/orchestration/docker-compose/docker-compose.yaml index f6d8eb467..5f5c0992b 100644 --- a/docs/orchestration/docker-compose/docker-compose.yaml +++ b/docs/orchestration/docker-compose/docker-compose.yaml @@ -11,10 +11,10 @@ x-minio-common: &minio-common # MINIO_ROOT_USER: minioadmin # MINIO_ROOT_PASSWORD: minioadmin healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"] - interval: 30s - timeout: 20s - retries: 3 + test: ["CMD", "mc", "ready", "local"] + interval: 5s + timeout: 5s + retries: 5 # starts 4 docker containers running minio server instances. # using nginx reverse proxy, load balancing, you can access