Skip to content

Conversation

@djgalloway
Copy link

pulpito-ng does not run correctly on OpenShift out of the box. OpenShift runs containers as non-root and enforces Security Context Constraints, which causes the existing Node-based runtime to fail at startup due to filesystem ownership changes.

This change switches pulpito-ng to a safer deployment model:

  • Build the React UI as static files during image build
  • Serve the UI with an unprivileged nginx runtime
  • Add nginx fallback routing so deep links (e.g. /runs/) work
  • Avoid any runtime chown or root assumptions

These files make it possible to build and deploy pulpito-ng directly from git on OpenShift without requiring privileged permissions or runtime workarounds.

@netlify
Copy link

netlify bot commented Dec 13, 2025

Deploy Preview for pulpito ready!

Name Link
🔨 Latest commit 7012532
🔍 Latest deploy log https://app.netlify.com/projects/pulpito/deploys/693db4996564030008798dbe
😎 Deploy Preview https://deploy-preview-105--pulpito.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

pulpito-ng does not run correctly on OpenShift out of the box.
OpenShift runs containers as non-root and enforces Security Context
Constraints, which causes the existing Node-based runtime to fail at
startup due to filesystem ownership changes.

This change switches pulpito-ng to a safer deployment model:

- Build the React UI as static files during image build
- Serve the UI with an unprivileged nginx runtime
- Add nginx fallback routing so deep links (e.g. /runs/<id>) work
- Avoid any runtime chown or root assumptions

These files make it possible to build and deploy pulpito-ng directly
from git on OpenShift without requiring privileged permissions or
runtime workarounds.

Signed-off-by: David Galloway <[email protected]>
@djgalloway
Copy link
Author

Note to self when this merges: run oc -n pulpito start-build pulpito-ng --follow --commit=main in Sepia

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants