WKBCH-13: Add automatic permission handling for Clickhouse shards

Containers now automatically fix ownership of data and log directories
on startup, eliminating the need for manual docker exec commands.

Author: dvasilas

cmd/configure.go

@@ -205,7 +205,9 @@ func generateMigrationToolsConfig(cfg EnvironmentConfig, path string) error {
 
 func generateClickhouseConfig(cfg EnvironmentConfig, path string) error {
 	templates := []string{
+		"Dockerfile.shard",
 		"Dockerfile.setup",
+		"entrypoint.sh",
 		"cluster-config.xml",
 		"ports-shard-1.xml",
 		"ports-shard-2.xml",

templates/clickhouse/Dockerfile.shard

@@ -0,0 +1,8 @@
+ARG BASE_IMAGE
+FROM $BASE_IMAGE
+
+USER root
+
+COPY --chmod=755 entrypoint.sh /usr/local/bin/
+
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

templates/clickhouse/entrypoint.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+set -e
+
+# Fix permissions on data and log directories
+chown -R clickhouse:clickhouse /var/lib/clickhouse
+chown -R clickhouse:clickhouse /var/log/clickhouse-server
+
+# Switch to clickhouse user and start server
+exec su clickhouse -s /bin/sh -c 'exec /usr/bin/clickhouse-server --config-file=/etc/clickhouse-server/config.xml'

templates/global/docker-compose.yaml

@@ -294,7 +294,11 @@ services:
       - feature-migration
 
   clickhouse-shard-1:
-    image: ${CLICKHOUSE_IMAGE}
+    build:
+      context: ./config/clickhouse
+      dockerfile: Dockerfile.shard
+      args:
+        BASE_IMAGE: ${CLICKHOUSE_IMAGE}
     container_name: workbench-clickhouse-shard-1
     hostname: clickhouse-shard-1
     network_mode: host
@@ -316,7 +320,11 @@ services:
       - feature-access-logging
 
   clickhouse-shard-2:
-    image: ${CLICKHOUSE_IMAGE}
+    build:
+      context: ./config/clickhouse
+      dockerfile: Dockerfile.shard
+      args:
+        BASE_IMAGE: ${CLICKHOUSE_IMAGE}
     container_name: workbench-clickhouse-shard-2
     hostname: clickhouse-shard-2
     network_mode: host