mirror of
https://github.com/alexta69/metube.git
synced 2025-04-04 12:47:38 +03:00
use gosu and usermod to ensure data permissions
This commit is contained in:
parent
9557b9d65a
commit
2a144e73ed
2 changed files with 39 additions and 2 deletions
22
Dockerfile
22
Dockerfile
|
@ -5,6 +5,14 @@ COPY ui ./
|
||||||
RUN npm ci && \
|
RUN npm ci && \
|
||||||
node_modules/.bin/ng build --prod
|
node_modules/.bin/ng build --prod
|
||||||
|
|
||||||
|
FROM golang:alpine3.15 as gosu-builder
|
||||||
|
|
||||||
|
RUN apk --update --no-cache add \
|
||||||
|
git
|
||||||
|
|
||||||
|
RUN git clone -b 1.14 --depth 1 --single-branch https://github.com/tianon/gosu /src
|
||||||
|
|
||||||
|
RUN cd /src && go build -o bin/gosu
|
||||||
|
|
||||||
FROM python:3.8-alpine
|
FROM python:3.8-alpine
|
||||||
|
|
||||||
|
@ -12,20 +20,30 @@ WORKDIR /app
|
||||||
|
|
||||||
COPY Pipfile* ./
|
COPY Pipfile* ./
|
||||||
|
|
||||||
|
ADD docker-entrypoint.sh /opt/scripts/docker-entrypoint.sh
|
||||||
|
|
||||||
RUN apk add --update ffmpeg && \
|
RUN apk add --update ffmpeg && \
|
||||||
apk add --update --virtual .build-deps gcc g++ musl-dev && \
|
apk add --update --virtual .build-deps gcc g++ musl-dev && \
|
||||||
pip install --no-cache-dir pipenv && \
|
pip install --no-cache-dir pipenv && \
|
||||||
pipenv install --system --deploy --clear && \
|
pipenv install --system --deploy --clear && \
|
||||||
pip uninstall pipenv -y && \
|
pip uninstall pipenv -y && \
|
||||||
|
apk add --update coreutils shadow && \
|
||||||
apk del .build-deps && \
|
apk del .build-deps && \
|
||||||
rm -rf /var/cache/apk/*
|
rm -rf /var/cache/apk/* && \
|
||||||
|
chmod +x /opt/scripts/docker-entrypoint.sh && \
|
||||||
|
useradd metube
|
||||||
|
|
||||||
COPY favicon ./favicon
|
COPY favicon ./favicon
|
||||||
COPY app ./app
|
COPY app ./app
|
||||||
COPY --from=builder /metube/dist/metube ./ui/dist/metube
|
COPY --from=builder /metube/dist/metube ./ui/dist/metube
|
||||||
|
COPY --from=gosu-builder /src/bin/ /bin
|
||||||
|
|
||||||
|
ENV UID=99
|
||||||
|
ENV GID=100
|
||||||
|
ENV UMASK=002
|
||||||
|
|
||||||
ENV DOWNLOAD_DIR /downloads
|
ENV DOWNLOAD_DIR /downloads
|
||||||
ENV STATE_DIR /downloads/.metube
|
ENV STATE_DIR /downloads/.metube
|
||||||
VOLUME /downloads
|
VOLUME /downloads
|
||||||
EXPOSE 8081
|
EXPOSE 8081
|
||||||
CMD ["python3", "app/main.py"]
|
ENTRYPOINT [ "/opt/scripts/docker-entrypoint.sh" ]
|
||||||
|
|
19
docker-entrypoint.sh
Normal file
19
docker-entrypoint.sh
Normal file
|
@ -0,0 +1,19 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
USER=metube
|
||||||
|
|
||||||
|
echo "---Setup Timezone to ${TZ}---"
|
||||||
|
echo "${TZ}" > /etc/timezone
|
||||||
|
echo "---Checking if UID: ${UID} matches user---"
|
||||||
|
usermod -o -u ${UID} ${USER}
|
||||||
|
echo "---Checking if GID: ${GID} matches user---"
|
||||||
|
groupmod -o -g ${GID} ${USER} > /dev/null 2>&1 ||:
|
||||||
|
usermod -g ${GID} ${USER}
|
||||||
|
echo "---Setting umask to ${UMASK}---"
|
||||||
|
umask ${UMASK}
|
||||||
|
|
||||||
|
mkdir -p ${DOWNLOAD_DIR} ${STATE_DIR}
|
||||||
|
|
||||||
|
chown -R ${UID}:${GID} /app ${DOWNLOAD_DIR} ${STATE_DIR}
|
||||||
|
|
||||||
|
gosu ${USER} python3 app/main.py
|
Loading…
Add table
Add a link
Reference in a new issue