where can I set the docker --user command in the gui

[SitQ80]

For example , i want to create jellyfin docker application.

From Jellyfin Documentation:
docker run -d \
--name jellyfin \
--user uid:gid \
--net=host \
--volume /path/to/config:/config \
--volume /path/to/cache:/cache \
--mount type=bind,source=/path/to/media,target=/media \
--restart=unless-stopped \
jellyfin/jellyfin


But in the command line there is --user uid:gid.
In truenas scale docker gui. Where can I set user's UID? I didn't find a relevant option.

 

[ClassicGOD]

There is no option for this in the GUI.

Why not run Jellyfin from TrueCharts? If I'm not mistaken their chart has option for setting the user.
Otherwise you can just skip it and Jellyfin should run with default user.

 

[truecharts]

Docker arguments are not available as SCALE does not use docker directly, it uses kubernetes.
As @ClassicGOD pointed out there are not options for user when using "Launch Docker" or the official Apps from iX Systems.

Our Apps, however, do support setting the user either with kubernetes "securityContext" (the "--user" equivalent of kubernetes) or PUID when required by the container.

 

[manami]

Docker arguments are not available as SCALE does not use docker directly, it uses kubernetes.
As @ClassicGOD pointed out there are not options for user when using "Launch Docker" or the official Apps from iX Systems.

Our Apps, however, do support setting the user either with kubernetes "securityContext" (the "--user" equivalent of kubernetes) or PUID when required by the container.

Yes, kubernetes control security in different way,but how to edit securityContext?
In Security Context only have Privileged Mode.

Code:

apiVersion: v1
kind: Pod
metadata:
  name: security-context-demo
spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
  volumes:
  - name: sec-ctx-vol
    emptyDir: {}
  containers:
  - name: sec-ctx-demo
    image: busybox:1.28
    command: [ "sh", "-c", "sleep 1h" ]
    volumeMounts:
    - name: sec-ctx-vol
      mountPath: /data/demo
    securityContext:
      allowPrivilegeEscalation: false

 

[truecharts]

Yes, kubernetes control security in different way,but how to edit securityContext?
In Security Context only have Privileged Mode.

Code:

apiVersion: v1
kind: Pod
metadata:
  name: security-context-demo
spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
  volumes:
  - name: sec-ctx-vol
    emptyDir: {}
  containers:
  - name: sec-ctx-demo
    image: busybox:1.28
    command: [ "sh", "-c", "sleep 1h" ]
    volumeMounts:
    - name: sec-ctx-vol
      mountPath: /data/demo
    securityContext:
      allowPrivilegeEscalation: false

The GUI is build by the App creator (including launch docker button).
iX simply has not added it to their Apps.

We have though...