gsadmin/headplane
1
0
Fork 0
mirror of https://github.com/tale/headplane.git synced 2026-08-24 03:26:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: walk back on nonroot, its too much of a breaking change

Browse Source
This commit is contained in:
Aarnav Tale
2025-06-24 12:23:05 -04:00
parent 6d99aca058
commit ce4617d0e1
2 changed files with 14 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+1 -2
View File
@@ -5,8 +5,7 @@
- Begin using a new SQLite database file in `/var/lib/headplane/hp_persist.db`. - Begin using a new SQLite database file in `/var/lib/headplane/hp_persist.db`.
- The database is created automatically if it does not exist. - The database is created automatically if it does not exist.
- It currently stores SSH connection details and will migrate older data. - It currently stores SSH connection details and will migrate older data.
- The docker container now runs in a non-root, distroless image (closes [#255](https://github.com/tale/headplane/issues/255)). - The docker container now runs in a distroless image (closes [#255](https://github.com/tale/headplane/issues/255)).
- You may need to run `chown -R 65532:65532 <host_path>` on your data directory to ensure the container can write to it.
- A debug version of the container that runs as root and has a shell is available as `ghcr.io/tale/headplane:<version>-shell`. - A debug version of the container that runs as root and has a shell is available as `ghcr.io/tale/headplane:<version>-shell`.
- Removing a Split DNS record will no longer make the split domain unresolvable by clients (closes [#231](https://github.com/tale/headplane/issues/231)). - Removing a Split DNS record will no longer make the split domain unresolvable by clients (closes [#231](https://github.com/tale/headplane/issues/231)).
- Reintroduce the toggle for overriding local DNS settings in the Headscale config (closes [#236](https://github.com/tale/headplane/issues/236)). - Reintroduce the toggle for overriding local DNS settings in the Headscale config (closes [#236](https://github.com/tale/headplane/issues/236)).
Dockerfile
+13 -13
View File
@@ -36,16 +36,16 @@ ARG IMAGE_TAG
RUN IMAGE_TAG=$IMAGE_TAG pnpm run build RUN IMAGE_TAG=$IMAGE_TAG pnpm run build
RUN mkdir -p /var/lib/headplane/agent RUN mkdir -p /var/lib/headplane/agent
FROM gcr.io/distroless/nodejs22-debian12:nonroot AS final FROM gcr.io/distroless/nodejs22-debian12:latest AS final
COPY --from=js-build --chown=nonroot:nonroot /build/build/ /app/build/ COPY --from=js-build /build/build/ /app/build/
COPY --from=js-build --chown=nonroot:nonroot /build/drizzle /app/drizzle/ COPY --from=js-build /build/drizzle /app/drizzle/
COPY --from=js-build --chown=nonroot:nonroot /var/lib/headplane /var/lib/headplane COPY --from=js-build /var/lib/headplane /var/lib/headplane
COPY --from=js-build --chown=nonroot:nonroot /build/node_modules/ /app/node_modules/ COPY --from=js-build /build/node_modules/ /app/node_modules/
COPY --from=go-build --chown=nonroot:nonroot /build/build/hp_agent /usr/libexec/headplane/agent COPY --from=go-build /build/build/hp_agent /usr/libexec/headplane/agent
# Fake shell to inform the user that they should use the debug image # Fake shell to inform the user that they should use the debug image
COPY --from=go-build --chown=nonroot:nonroot /build/build/sh /bin/sh COPY --from=go-build /build/build/sh /bin/sh
COPY --from=go-build --chown=nonroot:nonroot /build/build/sh /bin/bash COPY --from=go-build /build/build/sh /bin/bash
WORKDIR /app WORKDIR /app
CMD [ "/app/build/server/index.js" ] CMD [ "/app/build/server/index.js" ]
@@ -53,11 +53,11 @@ CMD [ "/app/build/server/index.js" ]
FROM node:22-alpine AS debug-shell FROM node:22-alpine AS debug-shell
RUN apk add --no-cache bash curl git RUN apk add --no-cache bash curl git
COPY --from=js-build --chown=nonroot:nonroot /build/build/ /app/build/ COPY --from=js-build /build/build/ /app/build/
COPY --from=js-build --chown=nonroot:nonroot /build/drizzle /app/drizzle/ COPY --from=js-build /build/drizzle /app/drizzle/
COPY --from=js-build --chown=nonroot:nonroot /var/lib/headplane /var/lib/headplane COPY --from=js-build /var/lib/headplane /var/lib/headplane
COPY --from=js-build --chown=nonroot:nonroot /build/node_modules/ /app/node_modules/ COPY --from=js-build /build/node_modules/ /app/node_modules/
COPY --from=go-build --chown=nonroot:nonroot /build/build/hp_agent /usr/libexec/headplane/agent COPY --from=go-build /build/build/hp_agent /usr/libexec/headplane/agent
WORKDIR /app WORKDIR /app
CMD [ "node", "/app/build/server/index.js" ] CMD [ "node", "/app/build/server/index.js" ]