docker-images/images/gossa/run.sh

#!/usr/bin/env bash

if [[ -z "${GOSSA_UID}" ]]; then
	echo "Error: No target uid specified in the GOSSA_UID environment variable.";
	exit 1;
fi
if [[ -z "${GOSSA_GID}" ]]; then
	echo "Error: No target gid specified in the GOSSA_GID environment variable.";
	exit 1;
fi
if [[ -z "${NOMAD_PORT_GOSSA}" ]]; then
	echo "Error: No port number specified in the NOMAD_PORT_GOSSA environment variable.";
	exit 1;
fi

echo "[core] Starting";
echo "[core] Running as uid = ${GOSSA_UID} gid = ${GOSSA_GID} port = ${NOMAD_PORT_GOSSA}";

cd "/mnt" || { echo "Failed to cd into /mnt"; exit 1; };


# Ref https://github.com/SinusBot/docker/pull/40
# WORKAROUND for `setpriv: libcap-ng is too old for "all" caps`, previously "-all" was used here
# create a list to drop all capabilities supported by current kernel
cap_prefix="-cap_";
caps="$cap_prefix$(seq -s ",$cap_prefix" 0 "$(cat /proc/sys/kernel/cap_last_cap)")";

setpriv --inh-caps="${caps}" --reuid "${GOSSA_UID}" --clear-groups --regid "${GOSSA_GID}" /usr/local/bin/gossa -h '[::]' -p "${NOMAD_PORT_GOSSA}" /mnt;

echo "[core] Ending";