feat: added gosu & updated run.sh to switch to the dedicated user (#1395)

Co-authored-by: Maka0 <360614-Maka0@users.noreply.gitlab.com>

Dockerfile

@@ -97,7 +97,7 @@ ENV GIT_COMMIT_HASH=$COMMIT
 # curl for used by healthcheck
 RUN apt-get update \
     && apt-get install --no-install-recommends -y \
-    curl \
+    curl gosu \
     && apt-get autoremove \
     && rm -rf /var/lib/apt/lists/*
 

mealie/run.sh

@@ -12,17 +12,28 @@ PGID=${PGID:-911}
 add_user() {
     groupmod -o -g "$PGID" abc
     usermod -o -u "$PUID" abc
+}
 
-    echo "
+change_user() {
-    User uid:    $(id -u abc)
+    # If container is started as root then create a new user and switch to it
-    User gid:    $(id -g abc)
+    if [ "$(id -u)" = "0" ]; then
-    "
+        add_user
-    chown -R abc:abc /app
+        chown -R $PUID:$PGID /app
+
+        echo "Switching to dedicated user"
+        exec gosu $PUID "$BASH_SOURCE" "$@"
+    elif [ "$(id -u)" = $PUID ]; then
+        echo "
+        User uid:    $PUID
+        User gid:    $PGID
+        "
+    fi
 }
 
 init() {
     # $MEALIE_HOME directory
     cd /app
+
     # Activate our virtual environment here
     . /opt/pysetup/.venv/bin/activate
 
@@ -45,7 +56,8 @@ if [ "$ARG1" == "reload" ]; then
 else
     echo "Production"
 
-    add_user
+    change_user
+
     init
 
     # Start API