Provide write permissions to container FS to golang app running in a distroless container about ko HOT 3 CLOSED

It sounds like you should be able to unblock by using a different base image, that runs as a user with permission to write to /etc. You could use gcr.io/distroless/static-debian11:nonroot as you do in the Dockerfile example, or another image.

The configuration used to override the base image is described here: https://ko.build/configuration/#overriding-base-images

from ko.

I have already tried to use gcr.io/distroless/static-debian11:nonroot with KO but even with this image by default you do not have permissions and that is the reason i had to explicitly create an empty dir in the builder step and change the ownership while copying that folder from the builder to the final image (only possible when using docker with skaffold, currently i do not see a way to do this with ko unless of course if i miss something that i have not yet explored). Same problem for all distroless images with nonroot users.

from ko.

This isn't really a ko issue. If you choose a base image that runs as a user that has permission to write to /etc, things should work fine. Neither the default base image or gcr.io/distroless/static-debian11:nonroot do that, but you can choose or build a base image that does allow that.

from ko.