Cadoles/fdroid-repository
21
0
Fork 0
Code Issues Pull Requests 1 Actions Projects Releases Wiki Activity

Use dedicated users to run services

Browse Source
This commit is contained in:
wpetit
2018-11-10 11:34:16 +01:00
parent 516d4899b4
commit 7d7f4ccfc2
7 changed files with 49 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
docker-entrypoint.sh
View File

@ -2,14 +2,15 @@
set -xeo pipefail
if [ ! -f /etc/ssh/ssh_host_rsa_key ]; then
echo "Generating SSH key..."
sed -i "s/^#HostKey.*$/HostKey \/etc\/ssh\/ssh_host_rsa_key/" /etc/ssh/sshd_config
ssh-keygen -f /etc/ssh/ssh_host_rsa_key -N '' -t rsa
if [ ! -f /fdroid/ssh_host_rsa_key ]; then
echo "Generating host SSH key..."
ssh-keygen -f /fdroid/ssh_host_rsa_key -N '' -t rsa
chown fdroid: /fdroid/ssh_host_rsa_key
fi
mkdir -p /root/.ssh
echo "${SSH_RSA_PUBLIC_KEY}" > /root/.ssh/authorized_keys
mkdir -p /fdroid/.ssh
echo "${SSH_PUBLIC_KEY}" > /fdroid/.ssh/authorized_keys
chmod 0600 /fdroid/.ssh/authorized_keys
if [ ! -f /fdroid/keystore/keystore.jks ]; then
keytool -genkey -noprompt \
@ -25,6 +26,8 @@ echo "Updating configuration from environment..."
envsubst < config.py.tmpl > config.py
chmod 0600 config.py
/fdroid-update.sh
chown -R fdroid: /fdroid
/usr/bin/supervisord
su - fdroid /fdroid/fdroid-update.sh
/usr/bin/supervisord -c /etc/supervisor.d/supervisor.ini