Fossil SCM
/dev permissions were too tight in the container. They're still tighter than on a stock Ubuntu box, but they should suffice for Fossil's needs.
Commit
8eeb95e127a837acd20ee53c4365345c3dd19a66bb844e53bb1235756dc05857
Parent
c9ab736f78d6a70…
1 file changed
+4
-3
+4
-3
| --- Dockerfile.in | ||
| +++ Dockerfile.in | ||
| @@ -34,13 +34,14 @@ | ||
| 34 | 34 | ENV PATH "/bin:/jail/bin" |
| 35 | 35 | COPY --from=builder /tmp/fossil bin/ |
| 36 | 36 | COPY --from=builder /tmp/bbx/busybox /bin/ |
| 37 | 37 | RUN [ "/bin/busybox", "--install", "/bin" ] |
| 38 | 38 | RUN set -x \ |
| 39 | - && mkdir -m 700 dev museum \ | |
| 40 | - && mknod -m 600 dev/null c 1 3 \ | |
| 41 | - && mknod -m 600 dev/urandom c 1 9 \ | |
| 39 | + && mkdir -m 755 dev \ | |
| 40 | + && mkdir -m 700 museum \ | |
| 41 | + && mknod -m 666 dev/null c 1 3 \ | |
| 42 | + && mknod -m 444 dev/urandom c 1 9 \ | |
| 42 | 43 | && echo 'root:x:0:0:SysAdmin:/:/bin/nologin' > /etc/passwd \ |
| 43 | 44 | && echo 'root:x:0:root' > /etc/group \ |
| 44 | 45 | && addgroup -g ${UID} fossil \ |
| 45 | 46 | && adduser -h `pwd` -g 'Fossil User' -G fossil -u ${UID} -S fossil \ |
| 46 | 47 | && echo -e '#!/bin/sh\nfossil sha1sum "$@"' > /bin/sha1sum \ |
| 47 | 48 |
| --- Dockerfile.in | |
| +++ Dockerfile.in | |
| @@ -34,13 +34,14 @@ | |
| 34 | ENV PATH "/bin:/jail/bin" |
| 35 | COPY --from=builder /tmp/fossil bin/ |
| 36 | COPY --from=builder /tmp/bbx/busybox /bin/ |
| 37 | RUN [ "/bin/busybox", "--install", "/bin" ] |
| 38 | RUN set -x \ |
| 39 | && mkdir -m 700 dev museum \ |
| 40 | && mknod -m 600 dev/null c 1 3 \ |
| 41 | && mknod -m 600 dev/urandom c 1 9 \ |
| 42 | && echo 'root:x:0:0:SysAdmin:/:/bin/nologin' > /etc/passwd \ |
| 43 | && echo 'root:x:0:root' > /etc/group \ |
| 44 | && addgroup -g ${UID} fossil \ |
| 45 | && adduser -h `pwd` -g 'Fossil User' -G fossil -u ${UID} -S fossil \ |
| 46 | && echo -e '#!/bin/sh\nfossil sha1sum "$@"' > /bin/sha1sum \ |
| 47 |
| --- Dockerfile.in | |
| +++ Dockerfile.in | |
| @@ -34,13 +34,14 @@ | |
| 34 | ENV PATH "/bin:/jail/bin" |
| 35 | COPY --from=builder /tmp/fossil bin/ |
| 36 | COPY --from=builder /tmp/bbx/busybox /bin/ |
| 37 | RUN [ "/bin/busybox", "--install", "/bin" ] |
| 38 | RUN set -x \ |
| 39 | && mkdir -m 755 dev \ |
| 40 | && mkdir -m 700 museum \ |
| 41 | && mknod -m 666 dev/null c 1 3 \ |
| 42 | && mknod -m 444 dev/urandom c 1 9 \ |
| 43 | && echo 'root:x:0:0:SysAdmin:/:/bin/nologin' > /etc/passwd \ |
| 44 | && echo 'root:x:0:root' > /etc/group \ |
| 45 | && addgroup -g ${UID} fossil \ |
| 46 | && adduser -h `pwd` -g 'Fossil User' -G fossil -u ${UID} -S fossil \ |
| 47 | && echo -e '#!/bin/sh\nfossil sha1sum "$@"' > /bin/sha1sum \ |
| 48 |