ensures files have the right owner:group
unfortunately, not enough to get group-writable permissions (need acl or umask for that),
so we still need to run it after each install
- any files the user should be able to write should have group `user-permissions` with `g+rwX`
- remove `chown` from start.sh because it is no longer needed
- add `fix-permissions` script for setting the user-writable permissions on a path
- user-permissions group as GID 10000 (is there a reason for it to have a different value?)
- containers can set group with `--group-add user-writable` if they want to run with a different uid/gid
(without -u root -e NB_UID -e NB_GID, which make this unnecessary)
- mplimporthook should be obsolete with matplotlib 2.0
- curlrc seems to be obsolete now (updates to base image?)
- set WORKDIR to $HOME instead of $HOME/work (leave work there for compatibility)
- add a few missing `--system` flags to conda config
- install default notebook config to /etc/jupyter instead of ~/.jupyter
- add a few missing `conda clean`s
* Upgrade to latest debian base image
* Upgrade to Notebook 4.3
* Upgrade to Miniconda 4.2.12
* Remove USE_HTTPS env var in favor of command line options for key and cert
* Add GEN_CERT env var for generating a self-signed certificate
* Remove PASSWORD env var in favor of the new Notebook 4.3 default token auth
or the more secure a hashed password command line option
base-notebook defines environment variables for the Conda install path and the
notebook user. However, in some instances, these locations were still hardcoded.
Let’s use the variables instead.
Prevent docker from creating the
~/.local/share/jupyter directory as rw for root
only. Otherwise notebook can’t create runtime/
and other import subduers
(c) Copyright IBM Corp. 2016
