build: fix build config

Dockerfile

@@ -1,3 +1,5 @@
+ARG PHP_8_5_TAG=latest
+
 FROM composer:2.9 AS vendor
 
 ARG GITLAB_USER
@@ -8,7 +10,7 @@ COPY database/ database/
 COPY composer.json composer.json
 COPY composer.lock composer.lock
 
-RUN composer config gitlab-token.lab.s-web.fr ${GITLAB_USER} ${GITLAB_PASSWORD}
+RUN composer config gitlab-token.lab.s-web.fr "${GITLAB_USER}" "${GITLAB_PASSWORD}"
 RUN composer install \
     --ignore-platform-reqs \
     --no-interaction \
@@ -35,6 +37,7 @@ RUN echo "@ldc-web:registry=https://lab.s-web.fr/api/v4/packages/npm/" >> .npmrc
 
 RUN bun install --frozen-lockfile && bun run prod
 
+ARG PHP_8_5_TAG
 FROM registry.s-web.fr/ldc-web/projets/ldc-web-images-docker/uwil-production-8.5:${PHP_8_5_TAG}
 
 ARG USER=www-data

manifest.yaml

@@ -72,6 +72,9 @@ spec:
       containers:
         - name: ${CI_PROJECT_PATH_SLUG}-container
           image: $IMAGE_TAG
+          env:
+            - name: XDG_CONFIG_HOME # For tinker
+              value: /tmp
           envFrom:
             - configMapRef:
                 name: ${CI_PROJECT_PATH_SLUG}-config-map
@@ -111,9 +114,9 @@ spec:
       imagePullSecrets:
         - name: docker-registry-credentials
       securityContext:
-        runAsUser: 33
-        runAsGroup: 33
-        fsGroup: 33
+        runAsUser: 82
+        runAsGroup: 82
+        fsGroup: 82
         fsGroupChangePolicy: "OnRootMismatch"
       volumes:
         - name: storage
@@ -197,8 +200,8 @@ spec:
             persistentVolumeClaim:
               claimName: ${CI_PROJECT_PATH_SLUG}-pvc-storage
           securityContext:
-            runAsUser: 33
-            runAsGroup: 33
-            fsGroup: 33
+            runAsUser: 82
+            runAsGroup: 82
+            fsGroup: 82
             fsGroupChangePolicy: "OnRootMismatch"
           restartPolicy: OnFailure