mirror of
https://github.com/ankitects/anki.git
synced 2025-09-19 06:22:22 -04:00
71e2a6f782
PUID and PGID are optional env variables to specify the user and group id of the user that the anki-sync-server process should run with. This gives more flexibility for solving permission problems with volumes and is a common pattern for Docker images (e.g. see here: https://docs.linuxserver.io/general/understanding-puid-and-pgid/) The anki-sync-server process will write any files with the permissions of the user it's running with, which can be a problem when you need to access those files from outside the container or when they are being written into a bind mount that is owned by a particular user on the host system. To be able to implement this the entrypoint.sh needs to run as root (since it needs to create a user and change file permissions). anki-sync-server then needs to be started with the user 'anki', which is why the new dependency 'su-exec' is required. The user 'anki' and group 'anki-group' can no longer be created at image build time because then their ids would be fixed. Also update the build instructions to require building the Docker image inside the directory where the Dockerfile resides since the build now needs to copy the entrypoint.sh and it seems wrong the specify the path docs/syncserver/entrypoint.sh inside the Dockerfile.
25 lines
567 B
Bash
25 lines
567 B
Bash
#!/bin/sh
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
|
|
# Default PUID and PGID if not provided
|
|
export PUID=${PUID:-1000}
|
|
export PGID=${PGID:-1000}
|
|
|
|
# Check if group exists, create if not
|
|
if ! getent group anki-group > /dev/null 2>&1; then
|
|
addgroup -g "$PGID" anki-group
|
|
fi
|
|
|
|
# Check if user exists, create if not
|
|
if ! id -u anki > /dev/null 2>&1; then
|
|
adduser -D -H -u "$PUID" -G anki-group anki
|
|
fi
|
|
|
|
# Fix ownership of mounted volumes
|
|
mkdir -p /anki_data
|
|
chown anki:anki-group /anki_data
|
|
|
|
# Run the provided command as the `anki` user
|
|
exec su-exec anki "$@"
|