wei-entrypoint.sh

#!/bin/bash
set -e
set -o pipefail

# Change the UID and GID of the app user if they are provided as environment variables
if [ -z "${USER_ID}" ]; then
    USER_ID=9999
fi
if [ -z "${GROUP_ID}" ]; then
    GROUP_ID=9999
fi

if [ "$USER_ID" -ne 0 ] && [ "$USER_ID" -ne 9999 ]; then
    GROUP_LIST=$(groups app)
    userdel app
elif [ "$GROUP_ID" -ne 0 ] && [ "$GROUP_ID" -ne 9999 ]; then
    groupdel app
fi
if [ "$GROUP_ID" -ne 0 ] && [ "$GROUP_ID" -ne 9999 ]; then
    groupadd -g $GROUP_ID app
fi
if [ "$USER_ID" -ne 0 ] && [ "$USER_ID" -ne 9999 ]; then
    useradd -u $USER_ID --shell /bin/bash -g ${GROUP_ID} app
    usermod -aG $(echo "$GROUP_LIST" | sed 's/.*: //; s/ /,/g') app
fi

# Best-effort attempt to align permissions for the default data directory
mkdir -p /home/app/.wei/experiments /home/app/.wei/temp /home/app/.diaspora
chown $USER_ID:$GROUP_ID /home/app || true
chown $USER_ID:$GROUP_ID /home/app/.wei || true
chown $USER_ID:$GROUP_ID /home/app/.wei/experiments || true
chown $USER_ID:$GROUP_ID /home/app/.wei/temp || true
chown $USER_ID:$GROUP_ID /home/app/.diaspora || true

# Run the container command as the specified user
if [ "$USER_ID" -eq 0 ] && [ "$GROUP_ID" -eq 0 ]; then
    # If we are root, easiest thing to do is to symlink everything from /home/app to /root
    shopt -s dotglob
    for item in /home/app/*; do
        dest="/root/$(basename "$item")"

        if [ ! -e "$dest" ]; then
            ln -s "$item" "$dest"
        fi
    done
    shopt -u dotglob
    exec "$@"
else
    # If we are not root, we need to drop privileges
    exec gosu app "$@"
fi