You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
this is my first time I'm using wazuh, and I hope my containers run stablely now!
However: As a security-feature docker offers a userspace-remapping so docker-containers run outside of the host's userspace. But there's a little issue when using this feature.
The shared/persistent storaged folders/files must be chowned by root to fit in that userspace. Usually one sets all of the persistent files to the first UID and GID of the designated remapping-userspace. For example: the remap-userspace begins with UID/GID 100000:100000, then this would be the UID and GID for the remapped root-superuser. When running the container at it's first time, the shared files and folders should be automatically be set to them's right ownerships by the containers (remapped) root-user.
However, within wazuh's container-instances it's impossible to let the server write to the .../config/wazuh-dashboard/wazuh.yml-file because of wrong file-permissions/-ownership.
If there's a list of the right ownerships and permissions, one could at least easily change them manually.
Thanks for reading!
Greetings!
The text was updated successfully, but these errors were encountered:
Hi @ all,
this is my first time I'm using wazuh, and I hope my containers run stablely now!
However: As a security-feature docker offers a userspace-remapping so docker-containers run outside of the host's userspace. But there's a little issue when using this feature.
The shared/persistent storaged folders/files must be chowned by root to fit in that userspace. Usually one sets all of the persistent files to the first UID and GID of the designated remapping-userspace. For example: the remap-userspace begins with UID/GID 100000:100000, then this would be the UID and GID for the remapped root-superuser. When running the container at it's first time, the shared files and folders should be automatically be set to them's right ownerships by the containers (remapped) root-user.
However, within wazuh's container-instances it's impossible to let the server write to the .../config/wazuh-dashboard/wazuh.yml-file because of wrong file-permissions/-ownership.
If there's a list of the right ownerships and permissions, one could at least easily change them manually.
Thanks for reading!
Greetings!
The text was updated successfully, but these errors were encountered: