docker - 用卷重建Docker镜像时权限被拒绝错误

Question

我正在尝试创建一个MongoDB Docker环境。我还希望数据在重建之间保持不变。所以我在docker-compose.yml中添加了一个卷。

这是我的docker-compose.yml

version: '3.1'

services:
  mongo:
    build:
      context: .
      dockerfile: ./docker/mongo/Dockerfile
    restart: always
    ports:
      - ${MONGO_PORT_FORWARD}:${MONGO_PORT}
    volumes:
      - ./data/db:/data/db:Z

这是我的 Dockerfile

FROM mongo:latest

ENV MONGO_INITDB_ROOT_USERNAME admin
ENV MONGO_INITDB_ROOT_PASSWORD secret
ENV MONGO_INITDB_DATABASE db

现在，我运行 docker-compose up，它可以完美运行。
但是，当我运行 docker-compose build重建图像时，出现以下错误。

Building mongo
Traceback (most recent call last):
  File "/usr/bin/docker-compose", line 11, in <module>
    load_entry_point('docker-compose==1.23.2', 'console_scripts', 'docker-compose')()
  File "/usr/lib/python3.7/site-packages/compose/cli/main.py", line 71, in main
    command()
  File "/usr/lib/python3.7/site-packages/compose/cli/main.py", line 127, in perform_command
    handler(command, command_options)
  File "/usr/lib/python3.7/site-packages/compose/cli/main.py", line 287, in build
    parallel_build=options.get('--parallel', False),
  File "/usr/lib/python3.7/site-packages/compose/project.py", line 384, in build
    build_service(service)
  File "/usr/lib/python3.7/site-packages/compose/project.py", line 366, in build_service
    service.build(no_cache, pull, force_rm, memory, build_args, gzip)
  File "/usr/lib/python3.7/site-packages/compose/service.py", line 1082, in build
    platform=self.platform,
  File "/usr/lib/python3.7/site-packages/docker/api/build.py", line 159, in build
    path, exclude=exclude, dockerfile=dockerfile, gzip=gzip
  File "/usr/lib/python3.7/site-packages/docker/utils/build.py", line 30, in tar
    files=sorted(exclude_paths(root, exclude, dockerfile=dockerfile[0])),
  File "/usr/lib/python3.7/site-packages/docker/utils/build.py", line 49, in exclude_paths
    return set(pm.walk(root))
  File "/usr/lib/python3.7/site-packages/docker/utils/build.py", line 214, in rec_walk
    for sub in rec_walk(cur):
  File "/usr/lib/python3.7/site-packages/docker/utils/build.py", line 214, in rec_walk
    for sub in rec_walk(cur):
  File "/usr/lib/python3.7/site-packages/docker/utils/build.py", line 214, in rec_walk
    for sub in rec_walk(cur):
  File "/usr/lib/python3.7/site-packages/docker/utils/build.py", line 184, in rec_walk
    for f in os.listdir(current_dir):
PermissionError: [Errno 13] Permission denied: '/home/zendy/Projects/ZendyLim/GTBox/data/db/journal'

我检查了 /data/db/的许可权，发现它的所有者为 999:root。

我在这里做错了什么？我该怎么做才能使这项工作？

更新1:

我试图在 mongodb中将用户设置为 docker-compose.yml

version: '3.1'

services:
  mongo:
    build:
      context: .
      dockerfile: ./docker/mongo/Dockerfile
    restart: always
    ports:
      - ${MONGO_PORT_FORWARD}:${MONGO_PORT}
    volumes:
      - ./data/db:/data/db:Z
    user: mongodb

并得到了这个错误

mongo_1  | about to fork child process, waiting until server is ready for connections.
mongo_1  | forked process: 17
mongo_1  | 2019-03-13T00:58:43.499+0000 I CONTROL  [main] ***** SERVER RESTARTED *****
mongo_1  | 2019-03-13T00:58:43.502+0000 I CONTROL  [main] Automatically disabling TLS 1.0, to force-enable TLS 1.0 specify --sslDisabledProtocols 'none'
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] MongoDB starting : pid=17 port=27017 dbpath=/data/db 64-bit host=1e56c8187004
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] db version v4.0.6
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] git version: caa42a1f75a56c7643d0b68d3880444375ec42e3
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] OpenSSL version: OpenSSL 1.0.2g  1 Mar 2016
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] allocator: tcmalloc
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] modules: none
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] build environment:
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten]     distmod: ubuntu1604
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten]     distarch: x86_64
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten]     target_arch: x86_64
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] options: { net: { bindIp: "127.0.0.1", port: 27017, ssl: { mode: "disabled" } }, processManagement: { fork: true, pidFilePath: "/tmp/docker-entrypoint-temp-mongod.pid" }, systemLog: { destination: "file", logAppend: true, path: "/proc/1/fd/1" } }
mongo_1  | 2019-03-13T00:58:43.504+0000 I STORAGE  [initandlisten] exception in initAndListen: IllegalOperation: Attempted to create a lock file on a read-only directory: /data/db, terminating
mongo_1  | 2019-03-13T00:58:43.504+0000 I NETWORK  [initandlisten] shutdown: going to close listening sockets...
mongo_1  | 2019-03-13T00:58:43.504+0000 I NETWORK  [initandlisten] removing socket file: /tmp/mongodb-27017.sock
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] now exiting
mongo_1  | 2019-03-13T00:58:43.504+0000 I CONTROL  [initandlisten] shutting down with code:100
mongo_1  | ERROR: child process failed, exited with error number 100
mongo_1  | To see additional information in this output, start without the "--fork" option.
gtbox_mongo_1 exited with code 100

Answer 1

找出解决方案

我创建了一个带有.dockerignore的data/文件。

# .dockerignore

data/

# Other files and folder

它设法重建没有任何问题。

如果我想要一个完整的数据库，这是唯一的缺点，我需要运行 sudo rm -rf data来删除该文件夹。