chown: changing ownership of ‘/data/db’: Operation not permitted

by

chown: changing ownership of ‘/data/db’: Operation not permitted .

You’ll want to either launch the mongo container as root, so that you can chown the directory, or if the image prohibits it (as some images already have a USER mongo clause that prohibits the container from escalating privileges back up to root), then one of two things: supersede the user with a securityContext stanza in containers: or use an initContainer: to preemptively change the target folder to be the mongo UID:

Approach #1:

containers:
- name: mongo
  image: mongo:something
  securityContext:
    runAsUser: 0

(which may require altering your cluster’s config to permit such a thing to appear in a PodSpec)

Approach #2 (which is the one I use with Elasticsearch images):

initContainers:
- name: chmod-er
  image: busybox:latest
  command:
  - /bin/chown
  - -R
  - "1000"  # or whatever the mongo UID is, use string "1000" not 1000 due to yaml
  - /data/db
  volumeMounts:
  - name: mongo-data  # or whatever
    mountPath: /data/db
containers:
- name: mongo  # then run your container as before

More Related Contents:

  1. How do I test a ClusterIssuer solver?
  2. pod has unbound PersistentVolumeClaims
  3. What’s the difference between ClusterIP, NodePort and LoadBalancer service types in Kubernetes?
  4. Service located in another namespace
  5. My kubernetes pods keep crashing with “CrashLoopBackOff” but I can’t find any log
  6. How do I access the Kubernetes api from within a pod container?
  7. How to pull environment variables with Helm charts
  8. Expose port in minikube
  9. Why container memory usage is doubled in cAdvisor metrics?
  10. kubectl apply vs kubectl create?
  11. Helm install in certain order
  12. Mount local directory into pod in minikube
  13. Invalid x509 certificate for kubernetes master
  14. Can a PVC be bound to a specific PV?
  15. How can I debug “ImagePullBackOff”?
  16. How to merge kubectl config file with ~/.kube/config?
  17. Kubernetes Cross Namespace Ingress Network
  18. Adding insecure registry in containerd
  19. Namespace “stuck” as Terminating, How I removed it
  20. no matches for kind “Deployment” in version “extensions/v1beta1”
  21. What is the difference between a pod and a deployment?
  22. What is a headless service, what does it do/accomplish, and what are some legitimate use cases for it?
  23. How to get Kubernetes cluster name from K8s API
  24. Ingress configuration for k8s in different namespaces
  25. How to access/expose kubernetes-dashboard service outside of a cluster?
  26. 413 error with Kubernetes and Nginx ingress controller
  27. Kubernetes PVC with ReadWriteMany on AWS
  28. Kubernetes Persistent Volume Access Modes: ReadWriteOnce vs ReadOnlyMany vs ReadWriteMany
  29. Listing all resources in a namespace
  30. Renew kubernetes pki after expired

Leave a Comment