From 974c6be129a15ab0f62cc102d5670d16655d73bc Mon Sep 17 00:00:00 2001 From: Tobias Florek Date: Fri, 20 May 2022 10:36:56 +0200 Subject: [PATCH 1/3] allow running image as non-root --- docker/entrypoint.sh | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh index d09787c..4178d10 100644 --- a/docker/entrypoint.sh +++ b/docker/entrypoint.sh @@ -8,6 +8,8 @@ set -e +cmd="npm run start:production" + if [ "${1#-}" != "${1}" ] || [ -z "$(command -v "${1}")" ]; then set -- node "$@" fi @@ -15,8 +17,16 @@ fi envsubst < /taiga-events/docker/env.template \ > /taiga-events/.env -chown -R taiga:taiga /taiga-events +if [ "$(id -u)" -eq 0 ]; then + chown -R taiga:taiga /taiga-events -# Start node process -echo Starting Taiga events -exec su-exec taiga npm run start:production + # Start node process + echo Starting Taiga events + # note: no quotes around $cmd to allow it to expand + exec su-exec taiga $cmd +else + # Start node process + echo Starting Taiga events + # note: no quotes around $cmd to allow it to expand + exec $cmd +fi From a2d4ccc52816253b022bb281109d0fafc932c493 Mon Sep 17 00:00:00 2001 From: Tobias Florek Date: Fri, 20 May 2022 10:37:50 +0200 Subject: [PATCH 2/3] allow running container as gid=0 and any uid --- docker/Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docker/Dockerfile b/docker/Dockerfile index 41508ac..787096b 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -22,7 +22,8 @@ RUN set -eux; \ chmod +x docker/entrypoint.sh; \ addgroup -g 99 -S taiga; \ adduser -u 99 -S -D -G taiga -H -h /taiga-events -s /bin/sh taiga; \ - chown -R taiga:taiga /taiga-events + chown -R taiga:0 /taiga-events; \ + chmod g+rwX /taiga-events EXPOSE 8888 ENTRYPOINT ["./docker/entrypoint.sh"] From 5e31a37afdb13f14cd22db671e86993c01099dbb Mon Sep 17 00:00:00 2001 From: Tobias Florek Date: Fri, 20 May 2022 10:38:31 +0200 Subject: [PATCH 3/3] fix permissions of docker/entrypoint.sh --- docker/entrypoint.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) mode change 100644 => 100755 docker/entrypoint.sh diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh old mode 100644 new mode 100755