Repository navigation
fix(ark): run as uid 25000 — the server cannot start as root - #17
Merged
Merged
Conversation
The image runs the server as the 'gameserver' user (uid 25000) and cannot initialise Proton as root: ProtonFixes aborts with Parent directory "/root/.config/protonfixes" does not exist the server never listens on RCON, and the startup probe kills it forever. Observed on the test cluster — 195 failed startup probes. The image's own compose sets 'user: gameserver' and ships a separate set-permissions service that chowns the volumes to 25000:25000. fsGroup makes the kubelet do that chown instead, so the PVC is writable by the non-root game user. Requires the GameTemplate spec.security field (Gameplane#128). Signed-off-by: valgulnecron <39313199+ValgulNecron@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
ARK's image runs the server as the
gameserveruser (uid 25000) and cannot initialise Proton as root:The server then never listens on RCON, so the startup probe kills it — forever. Observed on the test cluster: 195 failed startup probes. The entrypoint (#14) and startup-window (#15/#16) fixes were necessary but not sufficient; this is why ARK still never came up.
The image's own compose sets
user: gameserverand ships a separateset-permissionsservice thatchown -R 25000:25000s the volumes.fsGroupmakes the kubelet do that chown instead, so the PVC is writable by the non-root game user.Requires Gameplane#128, which adds
spec.securityto GameTemplate — no module could express this before.