mirror of
https://github.com/Trollobot/Telemax.git
synced 2026-10-16 15:16:13 +00:00
14 lines
782 B
Bash
14 lines
782 B
Bash
#!/bin/sh
|
|
# Starts as root ONLY to fix ownership of the mounted state volume, then drops to
|
|
# the unprivileged node user before running the bridge. Why not a static `USER node`
|
|
# in the Dockerfile: existing installs have a root-owned ./data (the pre-0.4.9
|
|
# container wrote it as root), and an auto-update runs the OLD update.sh — which
|
|
# can't chown for the new image — so the fix has to live INSIDE the container and
|
|
# run on every start. The bridge itself (which parses untrusted messenger input and
|
|
# renders attacker-supplied Lottie in Chromium --no-sandbox) never runs as root.
|
|
set -e
|
|
if [ "$(id -u)" = "0" ]; then
|
|
chown -R node:node /app/.data 2>/dev/null || true
|
|
exec setpriv --reuid node --regid node --init-groups node dist/server.mjs
|
|
fi
|
|
exec node dist/server.mjs
|