wehub-resource-sync
4cddfcf2f3
Backend Tests / Tests (other) (push) Failing after 1s
Backend Tests / Static Checks (push) Failing after 2s
Backend Tests / Tests (internal) (push) Failing after 2s
Backend Tests / Tests (server) (push) Failing after 1s
Backend Tests / Tests (store) (push) Failing after 1s
Build Canary Image / build-frontend (push) Failing after 1s
Frontend Tests / Lint (push) Failing after 1s
Build Canary Image / build-push (linux/amd64) (push) Has been skipped
Build Canary Image / build-push (linux/arm64) (push) Has been skipped
Build Canary Image / merge (push) Has been skipped
Frontend Tests / Build (push) Failing after 1s
Release Please / release-please (push) Failing after 0s
Proto Linter / Lint Protos (push) Failing after 2s
53 lines
1.6 KiB
Bash
Executable File
53 lines
1.6 KiB
Bash
Executable File
#!/usr/bin/env sh
|
|
|
|
# Fix ownership of the data directory (e.g. for users upgrading from older
|
|
# versions where files were created as root) and drop to a non-root user.
|
|
MEMOS_UID=${MEMOS_UID:-10001}
|
|
MEMOS_GID=${MEMOS_GID:-10001}
|
|
DATA_DIR="/var/opt/memos"
|
|
|
|
# MEMOS_ENTRYPOINT_SWITCHED marks that the privilege drop below has already run.
|
|
# su-exec preserves the environment, so the marker survives the re-exec. Without
|
|
# it, a target of UID 0 (e.g. MEMOS_UID=0, common under rootless Docker) would
|
|
# stay root after su-exec, re-enter this block, and loop forever.
|
|
if [ "$(id -u)" = "0" ] && [ -z "${MEMOS_ENTRYPOINT_SWITCHED:-}" ]; then
|
|
# Started as root: fix permissions, then re-exec as the target user.
|
|
if [ -d "$DATA_DIR" ]; then
|
|
chown -R "$MEMOS_UID:$MEMOS_GID" "$DATA_DIR" 2>/dev/null || true
|
|
fi
|
|
echo "memos: starting as UID:GID ${MEMOS_UID}:${MEMOS_GID}"
|
|
export MEMOS_ENTRYPOINT_SWITCHED=1
|
|
exec su-exec "$MEMOS_UID:$MEMOS_GID" "$0" "$@"
|
|
fi
|
|
unset MEMOS_ENTRYPOINT_SWITCHED
|
|
|
|
file_env() {
|
|
var="$1"
|
|
fileVar="${var}_FILE"
|
|
|
|
val_var="$(printenv "$var")"
|
|
val_fileVar="$(printenv "$fileVar")"
|
|
|
|
if [ -n "$val_var" ] && [ -n "$val_fileVar" ]; then
|
|
echo "error: both $var and $fileVar are set (but are exclusive)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ -n "$val_var" ]; then
|
|
val="$val_var"
|
|
elif [ -n "$val_fileVar" ]; then
|
|
if [ ! -r "$val_fileVar" ]; then
|
|
echo "error: file '$val_fileVar' does not exist or is not readable" >&2
|
|
exit 1
|
|
fi
|
|
val="$(cat "$val_fileVar")"
|
|
fi
|
|
|
|
export "$var"="$val"
|
|
unset "$fileVar"
|
|
}
|
|
|
|
file_env "MEMOS_DSN"
|
|
|
|
exec "$@"
|