slurmrestd user

Author: robert-oleynik

slurm-docker-cluster/Dockerfile

@@ -7,6 +7,8 @@ FROM debian:bookworm
 ARG SLURM_VERSION="24.05.4"
 ARG SLURM_USER_UID=990
 ARG SLURM_USER_GID=990
+ARG SLURMRESTD_USER_UID=65533
+ARG SLURMRESTD_USER_GID=65533
 ARG MYSQL_CONFIG_VERSION="0.8.34"
 
 COPY --from=uv /uv /bin/uv
@@ -46,6 +48,9 @@ COPY --chown=slurm:slurm slurmdbd.conf /etc/slurm/slurmdbd.conf
 RUN chmod 600 /etc/slurm/slurm.conf
 RUN chmod 600 /etc/slurm/slurmdbd.conf
 
+RUN addgroup --gid="$SLURMRESTD_USER_GID" slurmrestd
+RUN adduser --system --uid="$SLURMRESTD_USER_UID" --ingroup slurmrestd slurmrestd
+
 COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
 ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
 CMD ["slurmdbd"]

slurm-docker-cluster/docker-entrypoint.sh

@@ -48,7 +48,7 @@ fi
 if [ "$1" = "slurmrestd" ]
 then
 	shift 1
-	exec setpriv --reuid=nobody --regid=nobody --init-groups /usr/sbin/slurmrestd
+	exec setpriv --reuid=slurmrestd --regid=slurmrestd --init-groups /usr/sbin/slurmrestd "$@"
 fi
 
 set -x