add su-exec

This commit is contained in:
vincent 2022-11-20 11:43:05 +01:00
parent c7e2d1dd12
commit 59e54f752a
2 changed files with 6 additions and 4 deletions

View File

@ -1,7 +1,7 @@
FROM alpine:3.12 FROM alpine:3.12
MAINTAINER "EEA: IDM2 A-Team" <eea-edw-a-team-alerts@googlegroups.com> MAINTAINER "EEA: IDM2 A-Team" <eea-edw-a-team-alerts@googlegroups.com>
RUN apk add --no-cache --virtual .run-deps rsync openssh tzdata curl ca-certificates && rm -rf /var/cache/apk/* RUN apk add --no-cache --virtual .run-deps su-exec rsync openssh tzdata curl ca-certificates && rm -rf /var/cache/apk/*
COPY docker-entrypoint.sh / COPY docker-entrypoint.sh /
ENTRYPOINT ["/docker-entrypoint.sh"] ENTRYPOINT ["/docker-entrypoint.sh"]

View File

@ -16,10 +16,12 @@ if [ "$RSYNC_UID" != "" ] && [ "$RSYNC_GID" != "" ]; then
echo "rsyncuser:x:$RSYNC_UID:$RSYNC_GID::/home/rsyncuser:/bin/sh" >> /etc/passwd echo "rsyncuser:x:$RSYNC_UID:$RSYNC_GID::/home/rsyncuser:/bin/sh" >> /etc/passwd
echo "users:x:$RSYNC_GID:rsyncuser" >> /etc/group echo "users:x:$RSYNC_GID:rsyncuser" >> /etc/group
RSYNC_USER=rsyncuser RSYNC_USER=rsyncuser
RSYNC_GROUP=users
else else
# UID and GID not provided # UID and GID not provided
echo "UID and GID are NOT provided. Proceeding as the root user." echo "UID and GID are NOT provided. Proceeding as the root user."
RSYNC_USER=root RSYNC_USER=root
RSYNC_GROUP=root
fi fi
# Provide SSH_AUTH_KEY_* via environment variable # Provide SSH_AUTH_KEY_* via environment variable
@ -72,7 +74,7 @@ if [ "$1" == "server" ]; then
echo "Running: /usr/sbin/sshd $SSH_PARAMS " echo "Running: /usr/sbin/sshd $SSH_PARAMS "
echo "================================================================================" echo "================================================================================"
exec /usr/sbin/sshd -D $SSH_PARAMS su-exec $RSYNC_USER:$RSYNC_GROUP /usr/sbin/sshd -D $SSH_PARAMS
fi fi
echo "Please add this ssh key to your server /home/user/.ssh/authorized_keys " echo "Please add this ssh key to your server /home/user/.ssh/authorized_keys "
@ -85,10 +87,10 @@ echo "==========================================================================
################################################################################ ################################################################################
if [ "$1" == "client" ]; then if [ "$1" == "client" ]; then
exec /usr/sbin/crond -f su-exec $RSYNC_USER:$RSYNC_GROUP /usr/sbin/crond -f
fi fi
################################################################################ ################################################################################
# Anything else # Anything else
################################################################################ ################################################################################
exec "$@" su-exec $RSYNC_USER:$RSYNC_GROUP "$@"