Docker compose volumes website 403 Forbidden

Docker Hub
1

I was trying to deploy a website using docker compose. The nginx default page works properly but every time I attempt to use a volumes to display a different page I get 403 Forbidden. All the all the permissions are the same s the default nginx page 644.

[error] 22#22: *8 “/usr/share/nginx/html/index.html” is forbidden (13: Permission denied), client: 167.248.133.34, server: MyDomain.com, request: “GET / HTTP/1.1”, host: “107.22.69.233:80”

version: ‘3’
services:
webserver:
image: nginx:latest
restart: always
ports:
- 80:80
volumes:
- ./websites:/usr/share/nginx/html/

Any and all help is appreciated.

2

Make sure the ./websites folder is owned by UID101 and GID101.

3

Thanks for the reply. Unfortunately it appears that everything is checking out.

ls -l websites/
total 2
-rw-r–r-- 1 systemd-resolve systemd-journal 488 Apr 11 21:06 50x.html
-rw-r–r-- 1 systemd-resolve systemd-journal 766 Apr 11 21:06 favicon.ico
-rw-r–r-- 1 systemd-resolve systemd-journal 300 Apr 11 21:06 index.html
root@ip-10-0-0-126:/configs# ls -ln websites/
total 2
-rw-r–r-- 1 101 101 488 Apr 11 21:06 50x.html
-rw-r–r-- 1 101 101 766 Apr 11 21:06 favicon.ico
-rw-r–r-- 1 101 101 300 Apr 11 21:06 index.html

docker exec -it 09b30d63a834 bash

cat /etc/debian_version

11.6

cat /etc/passwd

.
.
nginx:x:101:101:nginx user,:/nonexistent:/bin/false

ls -ln /usr/share/nginx/html/

total 2
-rw-r–r-- 1 101 101 488 Apr 11 21:06 50x.html
-rw-r–r-- 1 101 101 766 Apr 11 21:06 favicon.ico
-rw-r–r-- 1 101 101 300 Apr 11 21:06 index.html

ls -ln

.
.
.
drw-r–r-- 1 101 101 0 Apr 11 21:22 websites
drw-r–r-- 1 33 33 0 Apr 10 00:04 wordpress

4

I am not sure where the last ls was used in, but the wordpress doesn’t look right.
Please share your compose file, so we can see how the container is actually configured.

5

Thanks for the reply. the wordpress is a hangover from the beginning when I was attempting to build a word press site and noticed I had a problem. I then made my docker compose file as simple as possible. The docker compose file I am using is as shown above.

6

It would help a great deal if you format your posts according: How to format your forum posts - #2 by zavertis

I scrolled up and didn’t notice/remember that you already pasted the compose file content. I was looking for a code block. I forgot that I saw it earlier.

Well if the owner is 101:101 for the folder and files in websites, then it should have worked. Unless of course there is another oddity at work like a special ACL implementation (e.g. on a Synology NAS).

Are you by any chance running your containers on a Synology NAS?

7 
version: '3'
services:
  webserver:
    image: nginx:latest
    restart: always
    ports:
      - "80:80"
    volumes: 
      - ./websites:/usr/share/nginx/html/
8

I am running AWS instances and the files are in a S3 bucket mounted to the instance.

9

Working files
These files were either the default nginx files
index2.html was custom made in the same directory as the working files.

# ls -l
total 12
-rw-r--r-- 1 root root 497 Mar 28 15:01 50x.html
-rw-r--r-- 1 root root 615 Mar 28 15:01 index.html
-rw-r--r-- 1 root root 301 Apr 12 22:37 index2.html
 
# stat *
  File: 50x.html
  Size: 497             Blocks: 8          IO Block: 4096   regular file
Device: 2bh/43d Inode: 305524      Links: 1
Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2023-03-28 15:01:54.000000000 +0000
Modify: 2023-03-28 15:01:54.000000000 +0000
Change: 2023-04-12 22:31:18.700064131 +0000
 Birth: 2023-04-12 22:31:18.700064131 +0000
 
  File: index.html
  Size: 615             Blocks: 8          IO Block: 4096   regular file
Device: 2bh/43d Inode: 305525      Links: 1
Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2023-03-28 15:01:54.000000000 +0000
Modify: 2023-03-28 15:01:54.000000000 +0000
Change: 2023-04-12 22:31:18.700064131 +0000
 Birth: 2023-04-12 22:31:18.700064131 +0000
 
  File: index2.html
  Size: 301             Blocks: 8          IO Block: 4096   regular file
Device: 2bh/43d Inode: 305928      Links: 1
Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2023-04-12 22:38:14.648620406 +0000
Modify: 2023-04-12 22:37:53.632390174 +0000
Change: 2023-04-12 22:37:53.632390174 +0000
 Birth: 2023-04-12 22:35:38.194897345 +0000

Files that DO NOT WORK

# ls -l
total 3
-rwxr-xr-x 1 nginx nginx 488 Apr 12 15:30 50x.html
-rwxr-xr-x 1 nginx nginx 766 Apr 12 15:30 favicon.ico
-rwxr-xr-x 1 nginx nginx 615 Apr 12 22:55 index.html
-rwxr-xr-x 1 root  root  301 Apr 12 22:50 index2.html

# stat *
  File: 50x.html
  Size: 488             Blocks: 1          IO Block: 4096   regular file
Device: 28h/40d Inode: 18          Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (  101/   nginx)   Gid: (  101/   nginx)
Access: 2023-04-12 15:30:35.000000000 +0000
Modify: 2023-04-12 15:30:35.000000000 +0000
Change: 2023-04-12 15:30:34.000000000 +0000
 Birth: -
 
  File: favicon.ico
  Size: 766             Blocks: 2          IO Block: 4096   regular file
Device: 28h/40d Inode: 19          Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (  101/   nginx)   Gid: (  101/   nginx)
Access: 2023-04-12 15:30:35.000000000 +0000
Modify: 2023-04-12 15:30:35.000000000 +0000
Change: 2023-04-12 15:30:34.000000000 +0000
 Birth: -
 
  File: index.html
  Size: 615             Blocks: 2          IO Block: 4096   regular file
Device: 28h/40d Inode: 20          Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (  101/   nginx)   Gid: (  101/   nginx)
Access: 2023-04-12 22:55:23.000000000 +0000
Modify: 2023-04-12 22:55:22.000000000 +0000
Change: 2023-04-12 22:55:22.000000000 +0000
 Birth: -
 
  File: index2.html
  Size: 301             Blocks: 1          IO Block: 4096   regular file
Device: 28h/40d Inode: 21          Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2023-04-12 22:50:39.000000000 +0000
Modify: 2023-04-12 22:50:39.000000000 +0000
Change: 2023-04-12 22:57:08.000000000 +0000
 Birth: -
13

Good Morning,

Not at all.
Thank you.

14

Docker compose is officially FUBAR