UID 1000 necessary; user / group for mounted folders
- X windows currently need user UID 1000
run.sh
needs to be run as UID 1000 currently. If not, opening windowed applications from the container does not work. This can be checked by running any application from the container, for example kate
. A symptom is that the DISPLAY
variable is not :0
.
I haven't checked if Wayland is affected, too.
- file/folder permissions
The mounted folders and all files are changed to GID=1001 and new files/folders are always created with UID=1000, GID=1001. That is not opportune if that is not your main user/group.
This could be improved to use the current user's UID and main group by doing user-/group- mapping when starting the container. I know this has been solved in "docker orchestrator scripts" by different approaches, for example in https://github.com/TYPO3/typo3/blob/main/Build/Scripts/runTests.sh and https://github.com/drud/ddev/. Yet it is some time that I worked with that so I can't say what is currently best practice.