請問在 k8s POD 裡面可以 SUDO SU　嗎

kubernetes

2015evanotes 2022-10-04 11:27:58 ‧ 866 瀏覽

分享至

請問在 k8s POD 裡面可以 SUDO SU　嗎　
kubectl exec -ti ｘｘｘｘＰＯＤ -- /bin/sh
sudo su
做了之後給我錯誤訊息

sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?

登入發表討論

直播研討會

{{ item.channelVendor }} {{ item.webinarstarted }} |

直播中

1 個回答

yoloshiku

iT邦新手 3 級 ‧ 2022-10-06 09:06:12

想不到預設不能sudo su的理由，你有試過其他container嗎? 我自己k8s的pod是沒有問題，感覺是image相關的問題

https://github.com/docker/for-linux/issues/1100

回應 1
分享
檢舉

2015evanotes iT邦新手 1 級 ‧ 2022-10-07 13:29:46 檢舉

恩恩感覺是 image 問題，但他設定不能的話我去改這個
Well actually, that's how sudo works...
Your user executes the binary /usr/bin/sudo
/usr/bin/sudo has the Sticky Bit set for the User (aka SUID) and the file is owned by the root user to the program will run as root even though you executed it as a non-root user.
/usr/bin/sudo reads the configuration files in /etc and will execute other commands as allowed by the configuration files.
應該應該也是沒權限吧這個不是要ROOT 才能改嗎 ??

登入發表回應