#!/usr/bin/env bash if [[ -z "${GOSSA_UID}" ]]; then echo "Error: No target uid specified in the GOSSA_UID environment variable."; exit 1; fi if [[ -z "${GOSSA_GID}" ]]; then echo "Error: No target gid specified in the GOSSA_GID environment variable."; exit 1; fi if [[ -z "${NOMAD_PORT_GOSSA}" ]]; then echo "Error: No port number specified in the NOMAD_PORT_GOSSA environment variable."; exit 1; fi echo "[core] Starting"; echo "[core] Running as uid = ${GOSSA_UID} gid = ${GOSSA_GID} port = ${NOMAD_PORT_GOSSA}"; cd "/mnt" || { echo "Failed to cd into /mnt"; exit 1; }; # Ref https://github.com/SinusBot/docker/pull/40 # WORKAROUND for `setpriv: libcap-ng is too old for "all" caps`, previously "-all" was used here # create a list to drop all capabilities supported by current kernel cap_prefix="-cap_"; caps="$cap_prefix$(seq -s ",$cap_prefix" 0 "$(cat /proc/sys/kernel/cap_last_cap)")"; setpriv --inh-caps="${caps}" --reuid "${GOSSA_UID}" --clear-groups --regid "${GOSSA_GID}" /usr/local/bin/gossa -h '[::]' -p "${NOMAD_PORT_GOSSA}" /mnt; echo "[core] Ending";