31 lines
1.1 KiB
Bash
Executable File
31 lines
1.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
if [[ -z "${GOSSA_UID}" ]]; then
|
|
echo "Error: No target uid specified in the GOSSA_UID environment variable.";
|
|
exit 1;
|
|
fi
|
|
if [[ -z "${GOSSA_GID}" ]]; then
|
|
echo "Error: No target gid specified in the GOSSA_GID environment variable.";
|
|
exit 1;
|
|
fi
|
|
if [[ -z "${NOMAD_PORT_GOSSA}" ]]; then
|
|
echo "Error: No port number specified in the NOMAD_PORT_GOSSA environment variable.";
|
|
exit 1;
|
|
fi
|
|
|
|
echo "[core] Starting";
|
|
echo "[core] Running as uid = ${GOSSA_UID} gid = ${GOSSA_GID} port = ${NOMAD_PORT_GOSSA}";
|
|
|
|
cd "/mnt" || { echo "Failed to cd into /mnt"; exit 1; };
|
|
|
|
|
|
# Ref https://github.com/SinusBot/docker/pull/40
|
|
# WORKAROUND for `setpriv: libcap-ng is too old for "all" caps`, previously "-all" was used here
|
|
# create a list to drop all capabilities supported by current kernel
|
|
cap_prefix="-cap_";
|
|
caps="$cap_prefix$(seq -s ",$cap_prefix" 0 "$(cat /proc/sys/kernel/cap_last_cap)")";
|
|
|
|
setpriv --inh-caps="${caps}" --reuid "${GOSSA_UID}" --clear-groups --regid "${GOSSA_GID}" /usr/local/bin/gossa -h '[::]' -p "${NOMAD_PORT_GOSSA}" /mnt;
|
|
|
|
echo "[core] Ending";
|