权限被拒绝：在 Docker 中'/var/lib/pgadmin/sessions'

Question

我遇到了与本文中描述的相同的问题，但在一个docker容器中。我真的不知道我的pgadmin文件位于哪里来编辑它的默认路径。我该如何着手解决此问题？请尽可能详细，因为我不知道如何停靠码头。

以下是docker-compose up命令的逐字摘要：

php-worker_1  | 2020-11-11 05:50:13,700 INFO spawned: 'laravel-worker_03' with pid 67
pgadmin_1     | [2020-11-11 05:50:13 +0000] [223] [INFO] Worker exiting (pid: 223)
pgadmin_1     | WARNING: Failed to set ACL on the directory containing the configuration database:
pgadmin_1     |            [Errno 1] Operation not permitted: '/var/lib/pgadmin'
pgadmin_1     | HINT   : You may need to manually set the permissions on
pgadmin_1     |          /var/lib/pgadmin to allow pgadmin to write to it.
pgadmin_1     | ERROR  : Failed to create the directory /var/lib/pgadmin/sessions:
pgadmin_1     |            [Errno 13] Permission denied: '/var/lib/pgadmin/sessions'
pgadmin_1     | HINT   : Create the directory /var/lib/pgadmin/sessions, ensure it is writeable by
pgadmin_1     |          'pgadmin', and try again, or, create a config_local.py file
pgadmin_1     |          and override the SESSION_DB_PATH setting per
pgadmin_1     |          https://www.pgadmin.org/docs/pgadmin4/4.27/config_py.html
pgadmin_1     | /usr/local/lib/python3.8/os.py:1023: RuntimeWarning: line buffering (buffering=1) isn't supported in binary mode, the default buffer size will be used
pgadmin_1     |   return io.open(fd, *args, **kwargs)
pgadmin_1     | [2020-11-11 05:50:13 +0000] [224] [INFO] Booting worker with pid: 224

我的码头组合yml:

### pgAdmin ##############################################
pgadmin:
image: dpage/pgadmin4:latest
environment:
- "PGADMIN_DEFAULT_EMAIL=${PGADMIN_DEFAULT_EMAIL}"
- "PGADMIN_DEFAULT_PASSWORD=${PGADMIN_DEFAULT_PASSWORD}"
ports:
- "${PGADMIN_PORT}:80"
volumes:
- ${DATA_PATH_HOST}/pgadmin:/var/lib/pgadmin
depends_on:
- postgres
networks:
- frontend
- backend

Answer 1

好的。当您尝试运行pgadmin服务时，似乎出现了问题。

本部分

### pgAdmin ##############################################
pgadmin:
image: dpage/pgadmin4:latest
environment:
- "PGADMIN_DEFAULT_EMAIL=${PGADMIN_DEFAULT_EMAIL}"
- "PGADMIN_DEFAULT_PASSWORD=${PGADMIN_DEFAULT_PASSWORD}"
ports:
- "${PGADMIN_PORT}:80"
volumes:
- ${DATA_PATH_HOST}/pgadmin:/var/lib/pgadmin
depends_on:
- postgres
networks:
- frontend
- backend

正如您所看到的，您试图将本地目录${DATA_PATH_HOST}/pgadmin装载到容器的/var/lib/pgadmin中

volumes:
- ${DATA_PATH_HOST}/pgadmin:/var/lib/pgadmin

正如您在本文中所读到的，本地${DATA_PATH_HOST}/pgadmin目录的UID和GID必须是5050。这是5050吗？

你可以通过运行进行检查

ls -l ${DATA_PATH_HOST}

输出将类似

drwxrwxr-x 1 5050 5050 12693 Nov 11 14:56 pgadmin

或

drwxrwxr-x 1 SOME_USER SOME_GROUP 12693 Nov 11 14:56 pgadmin

如果SOME_USER和SOME_GROUP的ID是5050，则可以。CCD_ 11也可以。如果没有，试着按照上面文章中描述的那样做。

sudo chown -R 5050:5050 ${DATA_PATH_HOST}/pgadmin

您还需要检查是否存在环境变量：

# run it as same user as you running docker-compose
echo ${DATA_PATH_HOST}

若输出为空，则需要设置${DATA_PATH_HOST}或允许docker从文件中读取变量。有很多方法可以做到这一点。

Answer 2

在kubernetes环境中运行时，我必须添加这些值。

spec:
containers:
- name: pgadmin
image: dpage/pgadmin4:5.4
securityContext:
runAsUser: 0
runAsGroup: 0

Answer 3

如果您在Windows上，请将此行添加到docker-compose.yml中。它使容器可以访问您的本地文件夹

version: "3.9"
services:
postgres:
user: root  <- this one 
container_name: postgres_container
image: postgres:14.2