Windows容器中的容器文件权限 [英] Container File Permissions in Windows Container

问题描述

我有一个Windows Docker容器（ microsoft / aspnet ），该容器托管一个简单的Web API。 Web API接受来自表单的文件，将它们保存在temp文件夹中，进行一些处理，然后返回结果。

I've got a Windows Docker container (microsoft/aspnet) that is hosting a simple Web API. The web API accepts files from a form, saves them in a temp folder, does some processing, and then returns the result.

在本地部署时工作正常，但是当在Docker容器中完成后，我的临时文件夹（ App_Data ）出现文件权限错误。

This works fine when deployed locally, but when done in my Docker container, I get a file permissions error on my temp folder (App_Data).

是一种向IIS用户授予代码正在作为对此文件的访问权而运行的方法，还是向任何用户打开该文件夹以进行读/写访问的权限？

Is there a way to grant the IIS user the code is running as access to this file, or to open up the folder to any user for read/write access?

当前Docker文件如下所示：

Current Docker file is below:

FROM microsoft/aspnet

COPY ./Deploy/ /inetpub/wwwroot

RUN mkdir /inetpub/wwwroot/App_Data 

错误消息片段我正在运行API来自docker映像：

Error message snippet I get running API from docker image:

"InnerException":{"Message":"An error has occurred.","ExceptionMessage":"Access to the path 'C:\\inetpub\\wwwroot\\App_Data\\BodyPart_481b6424-f9a5-4608-894d-406145a48445' is denied.","ExceptionType":"System.UnauthorizedAccessException"

在aspnet-docker github上似乎有一个关于同一问题的错误开放。 [链接]

It looks like there is a bug open on the aspnet-docker github about this same issue. [link]

与此同时，启动容器后，似乎运行 cacls App_Data / G IIS_IUSRS：F 可以临时解决问题。

In the meantime, it looks like running cacls App_Data /G IIS_IUSRS:F after starting the container fixes the issue temporarily.

推荐答案

不清楚原因，但是 cacls 在作为构建容器的一部分运行时似乎不起作用。切换为使用 icacls ，并且能够授予该文件夹的 IIS_USRS 权限。

Unclear why, but cacls doesn't seem to be working when run as part of building the container. Switched to using icacls, and was able to grant the IIS_USRS permissions on the folder.

添加到dockerfile的行：

Line added to dockerfile:

运行icacls'C：\inetpub\wwwroot\App_Data'/授予'IIS_IUSRS：（F）'

这篇关于Windows容器中的容器文件权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！