From 455f2ea544de8a724741b3eb09e82c3f863c3bcb Mon Sep 17 00:00:00 2001
From: Burt Holzman <burt@fnal.gov>
Date: Wed, 20 Apr 2022 12:08:03 -0500
Subject: [PATCH] Permissions changes for OKD/OpenShift compatibility

OpenShift/OKD runs containers as an ephemeral UID with GID 0.
This patch gives GID 0 write access to the output directory and
fixes some directories created with mode 700.
---
 DockerfileCMSAOD | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/DockerfileCMSAOD b/DockerfileCMSAOD
index c954646..f14701a 100644
--- a/DockerfileCMSAOD
+++ b/DockerfileCMSAOD
@@ -23,3 +23,7 @@ RUN echo "#!/bin/bash" > proxy-exporter.sh &&\
 COPY transformer.py transformer-actual.py
 COPY transformer-shim.py transformer.py
 WORKDIR /home/atlas
+
+RUN chmod 755 /home/cmsusr/.local /home/cmsusr/.local/lib /home/cmsusr/.local/lib/python3.6 \
+              /home/cmsusr/.local/lib/python3.6/site-packages
+RUN chgrp 0 /home/atlas && chmod g+w /home/atlas