Z2JH Hot to change NB_UID/NB_GID using authenticator_class?

edp · March 22, 2024, 4:33am

Hi @hiroyuki-sato
I have same problem about jupyter on k8s. please me some advise
image: Quay
singleuser:
cmd: # ← here i leave it blank.
when ldap user login . use command “id” show jovyan.

consideRatio · March 22, 2024, 6:08am

in the offical jupyter/scipy-notebook

Switch to Quay, and use a tag from 2024-02-xx or later, then singleuser.cmd won’t change the outcome - you will be able to chance the user id no matter what.

The docker hub images aren’t getting updates any more.

See GitHub - jupyter/docker-stacks: Ready-to-run Docker images containing Jupyter applications for details about using quay.io now

hiroyuki-sato · March 22, 2024, 8:09am

Hello, @consideRatio

Thank you for your information. It meant If I use Quay and 2024-02-xx later, I don’t need singleuser.cmd parameter. correct?

@edp Did you set NB_USER parameter?

github.com

jupyter/docker-stacks/blob/dd06b93abc41a5de327f8fbe3e597e4ed4c1bc0d/images/docker-stacks-foundation/start.sh#L59


      
          # shellcheck disable=SC1091
          source /usr/local/bin/run-hooks.sh /usr/local/bin/start-notebook.d
          
          # If the container started as the root user, then we have permission to refit
          # the jovyan user, and ensure file permissions, grant sudo rights, and such
          # things before we run the command passed to start.sh as the desired user
          # (NB_USER).
          #
          if [ "$(id -u)" == 0 ]; then
              # Environment variables:
              # - NB_USER: the desired username and associated home folder
              # - NB_UID: the desired user id
              # - NB_GID: a group id we want our user to belong to
              # - NB_GROUP: a group name we want for the group
              # - GRANT_SUDO: a boolean ("1" or "yes") to grant the user sudo rights
              # - CHOWN_HOME: a boolean ("1" or "yes") to chown the user's home folder
              # - CHOWN_EXTRA: a comma-separated list of paths to chown
              # - CHOWN_HOME_OPTS / CHOWN_EXTRA_OPTS: arguments to the chown commands
          
              # Refit the jovyan user to the desired user (NB_USER)
              if id jovyan &> /dev/null; then

edp · March 22, 2024, 8:30am

Thanks for you reply. @hiroyuki-sato @consideRatio
Post 2 Pic, a little bit human readable

The First image is my helm value.yml configuration.
The Second image is our ldap server user alice information.
Now, Below Config can change to /home/alice .but can’t change uid/gid.

skitidal · March 23, 2024, 3:43pm

I have a feeling that notebook server never started due to absence of --allow-root in spawner args.

Topic		Replies	Views
KubeSpawner and LDAPauthentication run under users LDAP UID Zero to JupyterHub on Kubernetes help-wanted	8	3471	May 31, 2023
LDAP uid/gid integration with jupyterhub / zero-to-jupyterhub-k8s:1.1.3 Zero to JupyterHub on Kubernetes jupyterhub , help-wanted	0	678	October 26, 2021
Starting single-user notebook with our custom ldap docker image JupyterHub how-to	9	7481	March 22, 2023
Can't Change jupyter/datascience-notebook UID and GID JupyterHub	2	350	March 21, 2024
LDAP uid/gid integration with jupyterhub/k8s-hub:0.9.0-beta.2 JupyterHub	1	1468	January 21, 2020

Z2JH Hot to change NB_UID/NB_GID using authenticator_class?

Related topics