From d7c08a8b1686ace6f30b500e914daecc084d65dc Mon Sep 17 00:00:00 2001 From: Evan Lezar Date: Thu, 19 Mar 2026 15:23:44 +0100 Subject: [PATCH] fix(docker): set migrations dir permissions to 755 on COPY Docker COPY preserves build-host file permissions. On hosts with a restrictive umask (e.g. 0027), the migrations directory is copied as 750 root:root, making it unreadable by the openshell user at runtime and causing the server to crash with a permission denied error on startup. Using --chmod=755 ensures the directory is always world-readable regardless of the build host umask. Signed-off-by: Evan Lezar --- deploy/docker/Dockerfile.images | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy/docker/Dockerfile.images b/deploy/docker/Dockerfile.images index 4740d830..2139e4c6 100644 --- a/deploy/docker/Dockerfile.images +++ b/deploy/docker/Dockerfile.images @@ -168,7 +168,7 @@ WORKDIR /app COPY --from=gateway-builder /build/out/openshell-server /usr/local/bin/ RUN mkdir -p /build/crates/openshell-server -COPY crates/openshell-server/migrations /build/crates/openshell-server/migrations +COPY --chmod=755 crates/openshell-server/migrations /build/crates/openshell-server/migrations USER openshell EXPOSE 8080