)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"af56692a55118ddbf64f802cc3a8f1ecb748f3d3","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"4951ec99_44cd8b53","updated":"2021-11-04 23:51:15.000000000","message":"\u003e Patch Set 1:\n\u003e \n\u003e None of the files gerritbot references need to be writable by gerritbot, so why not omit setting the user on the host system, make them all root-owned, but run the process in the container with a non-root uid?\n\nThey need to be readable by the gerritbot though. To make these files readable by a non root user while also preventing other bots from accessing these files we need a distinct user I think? I\u0027m open to other ideas.","commit_id":"78ad5cec4ba23e6b4a7f36cedb2b92be9de69b69"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"0aa2cdfd2449221ab17bb3780e35f9f27290e5cb","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"5ce50b92_cc95e560","updated":"2021-11-17 20:34:49.000000000","message":"As discussed I think we probably want to create this user in the container, but this is a good start to determine what else we need to do","commit_id":"fd8808733536d19d2a62b4120e43a508d77a4846"}],"playbooks/roles/gerritbot/templates/docker-compose.yaml.j2":[{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"886942b2c551ff2593d32a66632d3921fc7d56ee","unresolved":true,"context_lines":[{"line_number":14,"context_line":"        tag: \"docker-gerritbot\""},{"line_number":15,"context_line":"    volumes:"},{"line_number":16,"context_line":"      # This contains the main config, channel config, and ssh key"},{"line_number":17,"context_line":"      - /etc/gerritbot:/etc/gerritbot"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"035f1d76_d35a420c","line":17,"updated":"2021-11-05 05:06:41.000000000","message":"this could be turned into a RO mount while we\u0027re here?  it doesn\u0027t seem like it needs to write anything","commit_id":"78ad5cec4ba23e6b4a7f36cedb2b92be9de69b69"}]}