AdditionalGids must include effective group ID

cherry-pick moby commit: moby/moby@e44d7f7 Signed-off-by: Rudy Zhang <[email protected]>
AliyunContainerService · Nov 7, 2022 · 11b7f1e · 11b7f1e
1 parent 3cad3d6
commit 11b7f1e
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkg/user/user.go b/pkg/user/user.go
@@ -10,6 +10,7 @@ import (
 	"strings"
 
 	"github.com/alibaba/pouch/pkg/log"
+
 	"github.com/opencontainers/runc/libcontainer/user"
 )
 
@@ -61,7 +62,8 @@ func Get(passwdPath, groupPath, username string, groups []string) (uint32, uint3
 	uid := uint32(execUser.Uid)
 	gid := uint32(execUser.Gid)
 	sgids := append(execUser.Sgids, addGroups...)
-	var additionalGids []uint32
+
+	additionalGids := []uint32{gid}
 	for _, g := range sgids {
 		additionalGids = append(additionalGids, uint32(g))
 	}