fix: run PocketBase as root so it can write Coolify's persistent mount

Coolify attaches a root-owned volume/bind at /pb_data; the non-root pb user
couldn't write it, so SQLite failed with "unable to open database file (14)".
Drop the pb user and run as root. Verified against a root-owned bind mount
locally: server starts clean, migrations apply, data.db persists to the mount.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Claude 2026-07-15 21:08:12 +02:00
parent 24d59c3f91
commit cf299e06dd

View file

@ -15,21 +15,21 @@ RUN apk add --no-cache ca-certificates unzip wget \
FROM alpine:3.20
RUN apk add --no-cache ca-certificates \
&& adduser -D -H -u 10001 pb
RUN apk add --no-cache ca-certificates
COPY --from=fetch /pb/pocketbase /usr/local/bin/pocketbase
# Schema-as-code: migrations are baked in and auto-applied on serve.
COPY pb_migrations /pb_migrations
# Persist DB, uploaded files, and any admin-created migrations here. Create it
# owned by the runtime user so a fresh named volume inherits writable perms.
RUN mkdir -p /pb_data && chown pb /pb_data
# Persist DB, uploaded files, and any admin-created migrations here. Runs as root
# so it can always write the volume Coolify attaches — Coolify's persistent mount
# is root-owned, and a non-root user hitting it fails with SQLite "unable to open
# database file (14)".
RUN mkdir -p /pb_data
VOLUME ["/pb_data"]
EXPOSE 8090
USER pb
# Coolify terminates TLS at Traefik; PocketBase listens plain on 8090 behind it.
ENTRYPOINT ["pocketbase"]