Allow mounting SQLite in /home/ory/sqlite (#212)

.docker/Dockerfile

@@ -1,9 +1,17 @@
 FROM alpine:3.11
 
 RUN addgroup -S ory; \
- adduser -S ory -G ory -D -H -s /bin/nologin
+ adduser -S ory -G ory -D -h /home/ory -s /bin/nologin; \
+ chown -R ory:ory /home/ory
 RUN apk add -U --no-cache ca-certificates
 
+WORKDIR /home/ory
+
+# These are neccessary for mounting SQLITE volumes which require WRITE permission.
+RUN mkdir -p /home/ory/sqlite; \
+ chown ory:ory /home/ory/sqlite
+VOLUME /home/ory/sqlite
+
 COPY kratos /usr/bin/kratos
 
 USER ory

quickstart.yml

@@ -9,12 +9,12 @@ services:
  kratos-migrate:
  image: oryd/kratos:latest-sqlite
  environment:
- - DSN=sqlite:///var/lib/sqlite/db.sqlite?_fk=true
+ - DSN=sqlite:///home/ory/sqlite/db.sqlite?_fk=true
  volumes:
  -
  type: volume
  source: kratos-sqlite
- target: /var/lib/sqlite/
+ target: /home/ory/sqlite
  read_only: false
  -
  type: bind
@@ -70,11 +70,15 @@ services:
  - "4434:4434" # admin
  restart: unless-stopped
  environment:
- - DSN=sqlite:///var/lib/sqlite/db.sqlite?_fk=true
+ - DSN=sqlite:///home/ory/sqlite/db.sqlite?_fk=true
  command:
  serve -c /etc/config/kratos/.kratos.yml --dev
  volumes:
- - kratos-sqlite:/var/lib/sqlite/
+ -
+ type: volume
+ source: kratos-sqlite
+ target: /home/ory/sqlite
+ read_only: false
  -
  type: bind
  source: ./contrib/quickstart/kratos/email-password
@@ -93,6 +97,4 @@ networks:
  intranet:
 
 volumes:
- kratos-sqlite:
- kratos-config:
- oathkeeper-config:
+ kratos-sqlite: