From 1b5a95d4404ceb2484ee80eecfe4c9d34d88099a Mon Sep 17 00:00:00 2001
From: Julien Godin <julien.godin@camptocamp.com>
Date: Thu, 2 Jul 2026 14:41:27 +0200
Subject: [PATCH] feat: change UID/GID to 64604 and add migration file

Signed-off-by: Julien Godin <julien.godin@camptocamp.com>
---
 MIGRATION.md                        | 10 ++++++++++
 README.md                           |  5 +++++
 openvoxdb/prep_release_container.sh |  8 ++++----
 3 files changed, 19 insertions(+), 4 deletions(-)
 create mode 100644 MIGRATION.md

diff --git a/MIGRATION.md b/MIGRATION.md
new file mode 100644
index 0000000..a8acc49
--- /dev/null
+++ b/MIGRATION.md
@@ -0,0 +1,10 @@
+# Migrations
+
+## v8.15.0
+
+UID is changed from 1001 on alpine and 999 on ubuntu to 64604.
+If you already deployed the containers with mounted volume, you NEED to change the ownershop of these volumes and the files underneath.
+
+```bash
+chown -R 64604:64604 [PATH TO THE VOLUME]
+```
diff --git a/README.md b/README.md
index 7aad58b..359ef7f 100644
--- a/README.md
+++ b/README.md
@@ -9,6 +9,7 @@
 - [OpenVox DB container](#openvox-db-container)
   - [Informations](#informations)
     - [End of Life for OpenVox DB 7](#end-of-life-for-openvox-db-7)
+    - [Migration](#migration)
   - [Version schema](#version-schema)
   - [Configuration](#configuration)
     - [Cert File Locations](#cert-file-locations)
@@ -37,6 +38,10 @@ see the [Containerfiles and supporting folders](https://github.com/openvoxprojec
 Consequently, no new OpenVox DB 7 releases will be build.
 Existing versions will be retained for continued access.
 
+### Migration
+
+Before updating to a newer version of your container, you should check the [migration document](MIGRATION.md)
+
 ## Version schema
 
 Images are published to `ghcr.io/openvoxproject/openvoxdb` and
diff --git a/openvoxdb/prep_release_container.sh b/openvoxdb/prep_release_container.sh
index 080fa31..11fe97c 100755
--- a/openvoxdb/prep_release_container.sh
+++ b/openvoxdb/prep_release_container.sh
@@ -27,16 +27,16 @@ fi
 # Create puppet user and group, and set permissions on necessary directories
 # Used for rootless execution of the container and to match permissions expected by Puppet Server
 if command -v apk > /dev/null 2>&1; then
-  addgroup -g 1001 puppetdb
-  adduser -G puppetdb -u 1001 -h /opt/puppetlabs/server/data/puppetdb -H -D -s /sbin/nologin puppetdb
+  addgroup -g 64604 puppetdb
+  adduser -G puppetdb -u 64604 -h /opt/puppetlabs/server/data/puppetdb -H -D -s /sbin/nologin puppetdb
 else
-  groupadd --gid 1001 puppetdb
+  groupadd --gid 64604 puppetdb
   useradd \
     --gid puppetdb \
     --home-dir /opt/puppetlabs/server/data/puppetdb \
     --no-create-home \
     --shell /usr/sbin/nologin \
-    --uid 1001 \
+    --uid 64604 \
     puppetdb
 fi