deuill/coreos-home-server
1
0
Fork 0
mirror of https://github.com/deuill/coreos-home-server.git synced 2024-09-21 13:40:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

discord-ircd: Run container as root, daemon as user

Browse Source 
This allows us to do some early setup tasks as root, which are then
required for the correct operation of the daemon.
This commit is contained in:
Alex Palaistras 2021-09-19 17:30:34 +01:00
parent ea1769d67a
commit fa1b87af5a
2 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config/service/discord-ircd/Containerfile
View File

@ -1,7 +1,7 @@
FROM docker.io/debian:bullseye-slim FROM docker.io/debian:bullseye-slim
RUN apt-get update -y && apt-get install -y --no-install-recommends \ RUN apt-get update -y && apt-get install -y --no-install-recommends \
ca-certificates python3 python3-aiohttp gettext git ca-certificates python3 python3-aiohttp gettext git sudo
RUN git clone --depth 1 https://github.com/mk-fg/reliable-discord-client-irc-daemon.git /rdircd && \ RUN git clone --depth 1 https://github.com/mk-fg/reliable-discord-client-irc-daemon.git /rdircd && \
cp /rdircd/rdircd /usr/bin && chmod 0755 /usr/bin/rdircd && \ cp /rdircd/rdircd /usr/bin && chmod 0755 /usr/bin/rdircd && \
@ -14,7 +14,5 @@ COPY container/config /etc/rdircd
COPY container/run-rdircd /run-rdircd COPY container/run-rdircd /run-rdircd
RUN chown -R rdircd:rdircd /etc/rdircd RUN chown -R rdircd:rdircd /etc/rdircd
USER rdircd
EXPOSE 6667 EXPOSE 6667
ENTRYPOINT ["/run-rdircd"] ENTRYPOINT ["/run-rdircd"]

7
config/service/discord-ircd/container/run-rdircd
View File

@ -1,12 +1,13 @@
#!/bin/sh #!/bin/sh
# Prepare configuration files for environment variable substitution. # Prepare configuration files for environment variable substitution.
ENV_NAMES="`env | awk -F '=' '{printf "$%s ", $1}'`" ENV_NAMES="$(env | awk -F '=' '{printf "$%s ", $1}')"
for file in /etc/rdircd/*.template; do for file in /etc/rdircd/*.template; do
envsubst "${ENV_NAMES}" < "$file" > "`echo $file | awk -F '.template$' '{print $1}'`" envsubst "$ENV_NAMES" < "$file" > "$(echo "$file" | awk -F '.template$' '{print $1}')"
done done
# Ensure state file exists before starting service. # Ensure state file exists before starting service.
touch /var/lib/rdircd/state.conf touch /var/lib/rdircd/state.conf
chmod -R rdircd:rdircd /var/lib/rdircd
/usr/bin/rdircd --conf /etc/rdircd/rdircd.conf --conf /var/lib/rdircd/state.conf "$@" sudo --user rdircd -- /usr/bin/rdircd --conf /etc/rdircd/rdircd.conf --conf /var/lib/rdircd/state.conf "$@"