Set copied files’ numeric ownership.
Docker / Compose: COPY --chown sets ownership while adding the file.
FROM ubuntu:20.04
COPY --chown=65534:65534 message.txt /message.txt
USER 65534:65534
CMD ["sh","-c","test $(stat -c %u /message.txt) = 65534 && cat /message.txt"]Expected output EXAMPLE
owned
Details
Requires Docker Engine and Docker Compose (the docker compose command). Run in a disposable development environment with ubuntu:20.04 available locally. See the input setup for any starting containers or files. Save as Dockerfile, build with docker build -t snippet-demo ., then run docker run --rm snippet-demo. COPY --chown sets ownership while adding the file.
Tested on Alpine Linux v3.24 · · Client 29.9.0; Engine 29.9.0 · Compose 5.6.0; ubuntu:20.04
Test inputs, results and environment
The exact published code ran in a dedicated Linux test container with prepared inputs. Dedicated nested Docker daemon in a privileged test helper with no host Docker socket. No application data or host directories are mounted into the example containers. The outer helper has networking disabled; the base image is preloaded. Dockerfile examples are built and run; Compose examples start real containers. Fixtures and output records are isolated from the application database. Testing covers this example and its stated checks, not every input, operating system, or runtime version. The Linux container shares its host's kernel; this is not a native Windows test.
- Architecture / host kernel
- x86_64 / 6.18.54.1-microsoft-standard-WSL2
- Snippet identity / locale
- root inside disposable Docker-in-Docker helper / C.UTF-8
- Interpreter invocation
docker build --network=none --pull=false -t snippet-demo . && docker run --rm snippet-demo- Container image ID
sha256:aa45302a315fcbba307d6749ccbbac83af2e6f9447d6d714fce5b7b1c92b1081- Code SHA-256
fa0e286acb31982cfe5d98d3fffb60ef6771d3d17075702ebf31eafff237f01a- Dependencies
- Compose 5.6.0; ubuntu:20.04
Test input setup
These are the prepared inputs used by the test harness. See Details above for the prerequisites and how to run this example.
printf 'owned\n' > message.txt
Observed standard output
owned
Exit code: 0. Standard error: empty. Validation: Exact stdout comparison. System-dependent values above are one recorded run.
Additional assertions that passed
Checks recorded by the test harness. Where Python assertions are shown, browser cases use Playwright and simulator cases may inspect pin transitions: result.stdout is captured output, work is the temporary directory, and Path is pathlib.Path. The harness also imports json and csv.
All commands returned zero; exact output matched.