I’m inserting a secrets file by using [Manage >> Environment >> Secret Files] from the dashboard front end. My deployment is running as non-root with a uid assigned to gid 1000.
I have read the documentation here: Using Secrets with Docker – Render Docs, which makes it sound like I should be able to access the secrets at runtime (even as non-root) if my group (gid) is 1000.
But this does not work – on runtime, I still get “/etc/secrets/my_secrets: Permission denied” errors.
Specifically, in my Dockerfile I call:
RUN groupadd --gid 1000 mygroup
RUN useradd -ms /bin/bash --uid 1000 --gid 1000 myuser
USER 1000:1000
CMD ["/home/scripts/run.sh"]
How can I access secrets as non-root with a Dockerfile deployment in Render?