$ webservice --backend=kubernetes php5.6 shell
$ php -a
Interactive mode enabled

php > echo posix_getpwuid(posix_geteuid())['name'];
tools.multidesc
php >

	public function getLocalHome() {
		$info = posix_getpwuid(posix_geteuid());
		return $info['dir'];
	}
/* .. */
	protected function fetchDbCredentials() {
		$file = $this->getLocalHome() . '/replica.my.cnf';
		if ( !is_readable( $file ) || !is_file( $file ) ) {
			throw new Exception( 'Failed to fetch credentials from replica.my.cnf' );
		}
		$cnf = parse_ini_file( $file );
		if ( !$cnf || !$cnf['user'] || !$cnf['password'] ) {
			throw new Exception( 'Failed to fetch credentials from replica.my.cnf' );
		}

array (size=36)
  'PATH' => string '/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games' (length=56)
  'SHELL' => string '/bin/bash' (length=9)
  'USER' => string 'tools.guc' (length=9)
  'PHP_FCGI_CHILDREN' => string '2' (length=1)
  'PHP_FCGI_MAX_REQUESTS' => string '500' (length=3)
  'HTTP_COOKIE' => string ###
  'HTTP_ACCEPT_LANGUAGE' => string 'en-GB,en-US;q=0.9,en;q=0.8,nl;q=0.7' (length=35)
  'HTTP_ACCEPT_ENCODING' => string 'gzip, deflate, br' (length=17)
  'HTTP_ACCEPT' => string ##
  'HTTP_USER_AGENT' => string##
  'HTTP_UPGRADE_INSECURE_REQUESTS' => string '1' (length=1)
  'HTTP_X_ORIGINAL_URI' => string '/guc/'
  'HTTP_X_FORWARDED_PROTO' => string 'https' (length=5)
  'HTTP_HOST' => string 'tools.wmflabs.org' (length=17)
  'HTTP_CONNECTION' => string 'close' (length=5)
  'REMOTE_PORT' => string '51312' (length=5)
  'REMOTE_ADDR' => string '172.16.6.39' (length=11)
  'SERVER_NAME' => string 'tools.wmflabs.org' (length=17)
  'SERVER_ADDR' => string '172.16.1.68' (length=11)
  'SERVER_PORT' => string '49117' (length=5)
  'GATEWAY_INTERFACE' => string 'CGI/1.1' (length=7)
  'SERVER_SOFTWARE' => string 'lighttpd/1.4.45' (length=15)
  'SERVER_PROTOCOL' => string 'HTTP/1.1' (length=8)
  'REQUEST_METHOD' => string 'GET' (length=3)
  'DOCUMENT_ROOT' => string '/data/project/guc/public_html/' (length=30)
  'SCRIPT_FILENAME' => string '/data/project/guc/public_html//index.php' (length=40)
  'SCRIPT_NAME' => string '/guc/index.php' (length=14)
  'REDIRECT_STATUS' => string '200' (length=3)
  'REQUEST_URI' => string '/guc/?by=date&user=KrinkleBot&krinkle=1' (length=39)
  'QUERY_STRING' => string 'by=date&user=KrinkleBot&krinkle=1' (length=33)
  'CONTENT_LENGTH' => string '0' (length=1)
  'FCGI_ROLE' => string 'RESPONDER' (length=9)
  'PHP_SELF' => string '/guc/index.php' (length=14)
  'REQUEST_TIME_FLOAT' => float 1562711051.215
  'REQUEST_TIME' => int 1562711051

$ kubectl get po
NAME                      READY     STATUS    RESTARTS   AGE
replag-2249201953-tpzb9   1/1       Running   0          10d
$ kubectl describe pod replag-2249201953-tpzb9
Name:           replag-2249201953-tpzb9
Namespace:      replag
Node:           tools-worker-1012.tools.eqiad.wmflabs/172.16.3.78
Start Time:     Thu, 04 Jul 2019 23:53:48 +0000
Labels:         name=replag
                pod-template-hash=2249201953
                tools.wmflabs.org/webservice=true
                tools.wmflabs.org/webservice-version=1
Status:         Running
IP:             192.168.216.24
Controllers:    ReplicaSet/replag-2249201953
Containers:
  webservice:
    Container ID:       docker://efeb999fb8c6b25638d121be5b92c9022adc4726f03cd92bf17886cfa7cfa040
    Image:              docker-registry.tools.wmflabs.org/toollabs-php72-web:latest
    Image ID:           docker://sha256:e988f3376ad73854dbf5521e84ee9e890d9749d6280880cb0d52fd6faf111f20
    Port:               8000/TCP
    Command:
      /usr/bin/webservice-runner
      --type
      lighttpd
      --port
      8000
    Limits:
      cpu:      2
      memory:   2Gi
    Requests:
      cpu:              125m
      memory:           256Mi
    State:              Running
      Started:          Thu, 04 Jul 2019 23:54:59 +0000
    Ready:              True
    Restart Count:      0
    Volume Mounts:
      /data/project/ from home (rw)
      /data/scratch/ from scratch (rw)
      /etc/ldap.conf from etcldap-conf-s4l4s (rw)
      /etc/ldap.yaml from etcldap-yaml-c75xw (rw)
      /etc/novaobserver.yaml from etcnovaobserver-yaml-72svq (rw)
      /etc/wmcs-project from wmcs-project (rw)
      /mnt/nfs/ from nfs (rw)
      /public/dumps/ from dumps (rw)
      /var/run/nslcd/socket from varrunnslcdsocket-xuipu (rw)
    Environment Variables:
      HOME:     /data/project/replag/
Conditions:
  Type          Status
  Initialized   True
  Ready         True
  PodScheduled  True
Volumes:
  dumps:
    Type:       HostPath (bare host directory volume)
    Path:       /public/dumps/
  home:
    Type:       HostPath (bare host directory volume)
    Path:       /data/project/
  wmcs-project:
    Type:       HostPath (bare host directory volume)
    Path:       /etc/wmcs-project
  nfs:
    Type:       HostPath (bare host directory volume)
    Path:       /mnt/nfs/
  scratch:
    Type:       HostPath (bare host directory volume)
    Path:       /data/scratch/
  etcnovaobserver-yaml-72svq:
    Type:       HostPath (bare host directory volume)
    Path:       /etc/novaobserver.yaml
  varrunnslcdsocket-xuipu:
    Type:       HostPath (bare host directory volume)
    Path:       /var/run/nslcd/socket
  etcldap-conf-s4l4s:
    Type:       HostPath (bare host directory volume)
    Path:       /etc/ldap.conf
  etcldap-yaml-c75xw:
    Type:       HostPath (bare host directory volume)
    Path:       /etc/ldap.yaml
QoS Class:      Burstable
Tolerations:    <none>
No events.
$ kubectl exec -it replag-2249201953-tpzb9 -- /bin/bash
$ id
uid=52774 gid=0(root) groups=0(root),52774
$ whoami
whoami: cannot find name for user ID 52774: No such file or directory
$ ls -lh
total 8.9M
-rw-r--r-- 1 52774 52774 8.6M Jul 15 14:53 access.log
-rw-r--r-- 1 52774 52774 245K Jul 15 14:53 error.log
drwxrwxr-x 2 52774 52774 4.0K Dec  6  2016 logs
lrwxrwxrwx 1 52774 52774   18 Sep 13  2017 public_html -> tool-replag/public
-r-------- 1 52774 52774   52 Nov 27  2015 replica.my.cnf
-rw-r--r-- 1 52774 52774  22K May 25  2016 service.log
-rw-r--r-- 1 52774 52774  135 Mar 24 20:37 service.manifest
drwxr-sr-x 4 52774 52774 4.0K Sep 13  2017 tool-replag
$ echo $HOME
/data/project/replag/
$ ls -lh /var/run/nslcd/socket
srw-rw-rw- 0 root root 0 Apr  9 17:20 /var/run/nslcd/socket
$ ls -lh /etc/nslcd.conf
-rw-r----- 1 root nslcd 685 May 18 09:07 /etc/nslcd.conf
$ exit

$ ls -lh /var/run/nslcd/socket
srw-rw-rw- 1 root root 0 Jul  9 17:25 /var/run/nslcd/socket=