Browse Source

Change to nobody user.

master
Roelf Wichertjes 2 years ago
parent
commit
1d109e5106
Signed by: rewby GPG Key ID: 4C2B6D2972EE5423
2 changed files with 8 additions and 14 deletions
  1. +7
    -12
      Dockerfile
  2. +1
    -2
      entrypoint.sh

+ 7
- 12
Dockerfile View File

@@ -5,20 +5,15 @@ ENV TINI_VERSION v0.19.0
ADD https://github.com/krallin/tini/releases/download/${TINI_VERSION}/tini /tini
RUN chmod +x /tini

# Add user
RUN groupadd -g 1337 ab
RUN groupadd -r psudo
RUN useradd -rm -d /home/ab -s /bin/bash -g ab -G psudo -u 1337 ab

# Create data mount
RUN mkdir -p /data
RUN chown ab:ab /data
RUN chown nobody:nogroup /data

# Switch user
USER ab
WORKDIR /home/ab
COPY mover.sh /mover.sh
COPY entrypoint.sh /entrypoint.sh

COPY mover.sh /home/ab/mover.sh
COPY entrypoint.sh /home/ab/entrypoint.sh
# Switch user
USER nobody
WORKDIR /tmp

ENTRYPOINT [ "/tini", "--", "/home/ab/entrypoint.sh" ]
ENTRYPOINT [ "/tini", "--", "/entrypoint.sh" ]

+ 1
- 2
entrypoint.sh View File

@@ -5,7 +5,6 @@ set -exuo pipefail
trap "trap - SIGTERM && kill -- -$$" SIGINT SIGTERM EXIT

export SHARED_WARCS_DIR="${SHARED_WARCS_DIR:-/data/}"

export INCOMING="${INCOMING:-${SHARED_WARCS_DIR}/incoming/}"
export UPLOAD_QUEUE="${UPLOAD_QUEUE:-${SHARED_WARCS_DIR}/upload-queue/}"

@@ -14,7 +13,7 @@ mkdir -pv "${UPLOAD_QUEUE}"

case "$1" in
"mover")
./mover.sh
/mover.sh
;;

esac


Loading…
Cancel
Save