add device perm fixing to base
rodzic
9816352c23
commit
cd42f7fe4a
|
@ -0,0 +1,37 @@
|
||||||
|
#!/usr/bin/with-contenv bash
|
||||||
|
# shellcheck shell=bash
|
||||||
|
|
||||||
|
if [[ -z ${LSIO_NON_ROOT_USER} ]]; then
|
||||||
|
FILES=$(find ${ATTACHED_DEVICES_PERMS} -print 2>/dev/null)
|
||||||
|
|
||||||
|
for i in ${FILES}; do
|
||||||
|
FILE_GID=$(stat -c '%g' "${i}")
|
||||||
|
FILE_UID=$(stat -c '%u' "${i}")
|
||||||
|
# check if user matches device
|
||||||
|
if id -u abc | grep -qw "${FILE_UID}"; then
|
||||||
|
echo "**** permissions for ${i} are good ****"
|
||||||
|
else
|
||||||
|
# check if group matches and that device has group rw
|
||||||
|
if id -G abc | grep -qw "${FILE_GID}" && [[ $(stat -c '%A' "${i}" | cut -b 5,6) == "rw" ]]; then
|
||||||
|
echo "**** permissions for ${i} are good ****"
|
||||||
|
# check if device needs to be added to group
|
||||||
|
elif ! id -G abc | grep -qw "${FILE_GID}"; then
|
||||||
|
# check if group needs to be created
|
||||||
|
GROUP_NAME=$(getent group "${FILE_GID}" | awk -F: '{print $1}')
|
||||||
|
if [[ -z "${GROUP_NAME}" ]]; then
|
||||||
|
GROUP_NAME="group$(head /dev/urandom | tr -dc 'a-z0-9' | head -c4)"
|
||||||
|
groupadd "${GROUP_NAME}"
|
||||||
|
groupmod -g "${FILE_GID}" "${GROUP_NAME}"
|
||||||
|
echo "**** creating group ${GROUP_NAME} with id ${FILE_GID} ****"
|
||||||
|
fi
|
||||||
|
echo "**** adding ${i} to group ${GROUP_NAME} with id ${FILE_GID} ****"
|
||||||
|
usermod -a -G "${GROUP_NAME}" abc
|
||||||
|
fi
|
||||||
|
# check if device has group rw
|
||||||
|
if [[ $(stat -c '%A' "${i}" | cut -b 5,6) != "rw" ]]; then
|
||||||
|
echo -e "**** The device ${i} does not have group read/write permissions, attempting to fix inside the container. ****"
|
||||||
|
chmod g+rw "${i}"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
fi
|
|
@ -0,0 +1 @@
|
||||||
|
oneshot
|
|
@ -0,0 +1 @@
|
||||||
|
/etc/s6-overlay/s6-rc.d/init-device-perms/run
|
Ładowanie…
Reference in New Issue