chore: Dockerfile-alpine - Add commentary

polarathene · aeneasr · commit b2f202c4d9d1 · 2025-01-11T13:30:23.000+01:00
diff --git a/.docker/Dockerfile-alpine b/.docker/Dockerfile-alpine
@@ -5,6 +5,7 @@ RUN <<HEREDOC
     apk add --no-cache --upgrade ca-certificates
 
     # Add a user/group for Ory with a stable UID + GID:
+    # NOTE: This only appears relevant for supporting hydra as non-root, otherwise unnecessary.
     addgroup --system --gid 500 ory
     adduser --system --uid 500 \
       --gecos "Ory User" \
@@ -15,6 +16,9 @@ RUN <<HEREDOC
 
     # Create the sqlite directory with ownership to that user and group:
     # NOTE: This is required for read/write by SQLite.
+    # - Path may be a default value somewhere, or only explicitly provided via DSN?
+    # - Owner/Group is only relevant to permissions allowing the hydra process to read/write to the location.
+    # - Bind mount volumes will replace the ownership with that of the host directory, requiring correction.
     install --owner ory --group ory --directory /var/lib/sqlite
 HEREDOC
 
