Uploaded image for project: 'OpenShift Builds'
  1. OpenShift Builds
  2. BUILD-433

Run Unprivileged Builds with Environment Variable


    • Icon: Story Story
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • None
    • None
    • Sprint 217, Sprint 218, Sprint 219, Sprint 220, Sprint 221, Sprint 222, Sprint 224, Sprint 225, Sprint 226, Sprint 227, Sprint 228, Sprint 229, Sprint 230, Build + Jenkins Sprint 231, Build + Jenkins Sprint 232, Build + Jenkins Sprint 233, Build + Jenkins Sprint #234, Pipeline Integrations #235

      User Story

      As a developer building container images on OpenShift
      I want to specify that my build should run without elevated privileges
      So that builds do not run as root from the host's perspective with elevated privileges

      Acceptance Criteria

      • Developers can provide an environment variable to indicate the build should not use privileged containers
      • When the correct env var + value is specified, builds run in a user namespace (non-root on the host)

      QE Impact

      No QE required for Dev Preview. OpenShift regression testing will verify that existing behavior is not impacted.

      Docs Impact

      We will need to document how to enable this feature, with sufficient warnings regarding Dev Preview.

      PX Impact

      This likely warrants an OpenShift blog post, potentially?


            rhn-engineering-nalin Nalin Dahyabhai
            adkaplan@redhat.com Adam Kaplan
            0 Vote for this issue
            3 Start watching this issue