ssh plugin adds user flag

[chenyangxueHDU]

/kind feature

What happened:
The ssh plugin has --no-root flag for common user ssh, but I need to cp/link .ssh dir to user home dir.

What you expected to happen:
I would like to add --user flag to mount ssh configmap to user home dir, like --user=someone, mount .ssh to /home/users/someone/.ssh

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

• Volcano Version:
• Kubernetes version (use kubectl version):
• Cloud provider or hardware configuration:
• OS (e.g. from /etc/os-release):
• Kernel (e.g. uname -a):
• Install tools:
• Others:

[k82cn]

/cc @TommyLike @hzxuzhonghu

[k82cn]

hm... how to change the ownership of .ssh?

[hzxuzhonghu]

Currently, the permission is 0600, which is decided by ssh.

@chenyangxueHDU Do you mean you want to use a specific user instead of root in your docker images?

[TommyLike]

I guess he is asking whether volcano could mount the ssh config file into a user default folder, for instance /home/user1/.ssh/. @chenyangxueHDU This is not supported now, see

volcano/pkg/controllers/job/plugins/ssh/ssh.go

Line 97 in 1a856a1

sshPath := SSHAbsolutePath

cc @k82cn @hzxuzhonghu

[chenyangxueHDU]

hm... how to change the ownership of .ssh?

Yes, it's the problem. I think we can pass uid/gid, then we can change the ownership

[chenyangxueHDU]

Currently, the permission is 0600, which is decided by ssh.

@chenyangxueHDU Do you mean you want to use a specific user instead of root in your docker images?

yes, I use the runuser to run the command.

[chenyangxueHDU]

I guess he is asking whether volcano could mount the ssh config file into a user default folder, for instance /home/user1/.ssh/. @chenyangxueHDU This is not supported now, see

volcano/pkg/controllers/job/plugins/ssh/ssh.go

Line 97 in 1a856a1

sshPath := SSHAbsolutePath

cc @k82cn @hzxuzhonghu

I know, so it is a feature

[hzxuzhonghu]

It makes sense, we can provide a user flag for ssh plugin to allow users pass a user, and make root as the default value.

And we should also prevent users from setting RunAsUser non root without providing the user name.

[chenyangxueHDU]

It makes sense, we can provide a user flag for ssh plugin to allow users pass a user, and make root as the default value.

And we should also prevent users from setting RunAsUser non root without providing the user name.

Yes

[k82cn]

That's OK to me to have such feature, some HPC user would like to run application as no-root user.

[hzxuzhonghu]

/assign

[TommyLike]

what if I provide a non-exists user?

[hzxuzhonghu]

Good question， the answer is job will definitely fail.
We can not detect whether the user exists by the volcano job template. This should be guaranteed by users.

[zrss]

/cc

i'd like the ssh plugin can define the ssh key file path

such as /opt/platform/.ssh or something else

[k82cn]

/cc @hzxuzhonghu , let's add a paramenter into ssh plugin for key file directory.

[hzxuzhonghu]

OK

[stale]

Hello 👋 Looks like there was no activity on this issue for last 90 days.
Do you mind updating us on the status? Is this still reproducible or needed? If yes, just comment on this PR or push a commit. Thanks! 🤗
If there will be no activity for 60 days, this issue will be closed (we can always reopen an issue if we need!).

[stale]

Closing for now as there was no activity for last 60 days after marked as stale, let us know if you need this to be reopened! 🤗