mirror of
https://github.com/TheFunny/TelegramTwitterMediaBot.git
synced 2026-09-23 23:32:05 +00:00
YoursFunny
c40b074b3c
- Replace the mtime-touch stub-rebuild hack with cargo clean -p (a future-dated host file could silently ship the stub binary) - Optional FFMPEG_SHA256 build arg verified before extraction - Drop the redundant libssl3/libcrypto copies and the root supplementary group; strip the release binary; add a webhook-mode healthcheck to the compose example
30 lines
1.0 KiB
Bash
30 lines
1.0 KiB
Bash
#!/bin/bash
|
|
|
|
set -e
|
|
if [ "$(id -u)" -eq '0' ]
|
|
then
|
|
USER_ID=${LOCAL_USER_ID:-9001}
|
|
|
|
# `docker compose restart` / `docker restart` reuse the same container, so
|
|
# the overlay fs keeps the user created on first boot. A second `useradd`
|
|
# then fails with exit code 9, which would trip `set -e` and kill the
|
|
# container on every restart. Create only if missing; align the UID
|
|
# otherwise so LOCAL_USER_ID changes still apply.
|
|
if ! id user > /dev/null 2>&1
|
|
then
|
|
useradd --shell /bin/bash -u ${USER_ID} -o -c "" -m user > /dev/null 2>&1 || true
|
|
else
|
|
usermod -u ${USER_ID} -o user > /dev/null 2>&1 || true
|
|
fi
|
|
# Bind-mounted volumes may not support chown; a failure here must not kill
|
|
# the container either.
|
|
chown -R `id -u user`:`id -u user` /app > /dev/null 2>&1 || true
|
|
|
|
export HOME=/home/user
|
|
# setpriv (util-linux, present in bookworm-slim) replaces gosu: drop to the
|
|
# target user and exec, keeping the process as PID 1.
|
|
exec setpriv --reuid=`id -u user` --regid=`id -g user` --init-groups "$@"
|
|
fi
|
|
|
|
exec "$@"
|