mirror of
https://github.com/TheFunny/TelegramTwitterMediaBot.git
synced 2026-09-24 23:42:18 +00:00
YoursFunny
c420c95165
LOCAL_USER_ID=0 passed every check and reached `setpriv --reuid=0`: the bot would run root while looking properly configured, and useradd -o accepted the duplicate uid without complaint. A non-numeric value failed later inside useradd behind `|| true`, which hid the real cause. The entrypoint now rejects both up front with a message naming the variable, and the id/uid expansions are quoted so a value with spaces cannot word-split into extra useradd arguments (audit SEC-007). Verified by sourcing the entrypoint under a faked `id`: uid 0, 'abc' and '12 3' each exit 1 with the refusal line, while a non-root caller passes straight through to exec. AGENTS and .env.example state the constraint.
46 lines
1.6 KiB
Bash
46 lines
1.6 KiB
Bash
#!/bin/bash
|
|
|
|
set -e
|
|
if [ "$(id -u)" -eq '0' ]
|
|
then
|
|
USER_ID=${LOCAL_USER_ID:-9001}
|
|
|
|
# A non-numeric id breaks useradd/usermod in confusing ways, and uid 0
|
|
# would sail straight through the privilege drop below (`setpriv
|
|
# --reuid=0` keeps the bot root while looking configured) — refuse both
|
|
# up front.
|
|
case $USER_ID in
|
|
''|*[!0-9]*)
|
|
echo "docker-entrypoint: LOCAL_USER_ID must be a numeric uid, got '$USER_ID'" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
if [ "$USER_ID" -eq 0 ]
|
|
then
|
|
echo "docker-entrypoint: LOCAL_USER_ID=0 would keep the bot root; refusing" >&2
|
|
exit 1
|
|
fi
|
|
|
|
# `docker compose restart` / `docker restart` reuse the same container, so
|
|
# the overlay fs keeps the user created on first boot. A second `useradd`
|
|
# then fails with exit code 9, which would trip `set -e` and kill the
|
|
# container on every restart. Create only if missing; align the UID
|
|
# otherwise so LOCAL_USER_ID changes still apply.
|
|
if ! id user > /dev/null 2>&1
|
|
then
|
|
useradd --shell /bin/bash -u "${USER_ID}" -o -c "" -m user > /dev/null 2>&1 || true
|
|
else
|
|
usermod -u "${USER_ID}" -o user > /dev/null 2>&1 || true
|
|
fi
|
|
# Bind-mounted volumes may not support chown; a failure here must not kill
|
|
# the container either.
|
|
chown -R "$(id -u user):$(id -g user)" /app > /dev/null 2>&1 || true
|
|
|
|
export HOME=/home/user
|
|
# setpriv (util-linux, present in bookworm-slim) replaces gosu: drop to the
|
|
# target user and exec, keeping the process as PID 1.
|
|
exec setpriv --reuid="$(id -u user)" --regid="$(id -g user)" --init-groups "$@"
|
|
fi
|
|
|
|
exec "$@"
|