mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-10 01:27:11 +00:00
UNITRONIX
d4a74350a8
Detect partial volume wipes that leave legacy auth.db in /app/data while /opt/rustdesk was reset, which broke panel login despite a fresh .admin_credentials file. Fail fast with a clear error, remove empty orphan auth.db on fresh installs, and document compose ADMIN_PASSWORD mapping. Refs #385 Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
41 lines
1.6 KiB
Bash
41 lines
1.6 KiB
Bash
#!/bin/sh
|
|
# BetterDesk Console — Docker Entrypoint Wrapper
|
|
# Fixes volume file permissions before dropping to non-root user
|
|
set -e
|
|
|
|
# shellcheck source=/dev/null
|
|
. /ensure-app-user.sh
|
|
ensure_betterdesk_user
|
|
|
|
# Fix ownership of volume-mounted data directories.
|
|
# Docker volumes preserve UID/GID from the host or previous container,
|
|
# which may not match the betterdesk user (PUID/PGID, default 10001).
|
|
if [ "$(id -u)" = "0" ]; then
|
|
chown -R betterdesk:betterdesk /app/data 2>/dev/null || true
|
|
# Fix permissions on sensitive files
|
|
if [ -f /app/data/.session_secret ]; then
|
|
chmod 600 /app/data/.session_secret
|
|
chown betterdesk:betterdesk /app/data/.session_secret
|
|
fi
|
|
if [ -f /app/data/auth.db ]; then
|
|
chown betterdesk:betterdesk /app/data/auth.db
|
|
fi
|
|
# /opt/rustdesk may be mounted read-only from server volume — only fix if writable
|
|
chown -R betterdesk:betterdesk /opt/rustdesk 2>/dev/null || true
|
|
# Import shared bootstrap password from server volume (issue #385).
|
|
# shellcheck source=/docker/bootstrap-admin-credentials.sh
|
|
. /docker/bootstrap-admin-credentials.sh
|
|
# shellcheck source=/docker/guard-sqlite-auth-split.sh
|
|
. /docker/guard-sqlite-auth-split.sh
|
|
guard_sqlite_auth_split
|
|
# Drop privileges and run the actual entrypoint
|
|
exec su-exec betterdesk /app/docker-entrypoint.sh
|
|
else
|
|
# shellcheck source=/docker/bootstrap-admin-credentials.sh
|
|
. /docker/bootstrap-admin-credentials.sh
|
|
# shellcheck source=/docker/guard-sqlite-auth-split.sh
|
|
. /docker/guard-sqlite-auth-split.sh
|
|
guard_sqlite_auth_split
|
|
exec /app/docker-entrypoint.sh
|
|
fi
|