mirror of
https://github.com/Dispatcharr/Dispatcharr.git
synced 2026-07-18 09:06:06 +00:00
7e22172070
The auto-detect read PUID/PGID from /data/db ownership (UID 102 in pre-PUID images), causing all upgrading users to run as UID 102 instead of the expected UID 1000. This broke host-side access (SSH, WinSCP), made existing DATA_DIR files unwritable, and failed comskip on recordings created before the change.
127 lines
5.8 KiB
Bash
127 lines
5.8 KiB
Bash
#!/bin/bash
|
|
|
|
# NOTE: PUID/PGID values matching internal system UIDs (e.g. 102 for the
|
|
# postgres package user) will cause that OS user/group to be renamed to
|
|
# $POSTGRES_USER inside the container. This is cosmetic and does not affect
|
|
# runtime behavior since all postgres operations run as $POSTGRES_USER
|
|
# rather than the postgres system user.
|
|
|
|
# Default PUID/PGID to 1000 when not explicitly set.
|
|
# The old image ran Django as UID 1000 and PostgreSQL as UID 102. Since
|
|
# DATA_DIRS and host-side files are owned by 1000, defaulting to 1000
|
|
# preserves access for upgrading users without requiring configuration.
|
|
# The DB ownership migration (102 → 1000) is handled by 02-postgres.sh.
|
|
export PUID=${PUID:-1000}
|
|
export PGID=${PGID:-1000}
|
|
|
|
# Validate PUID/PGID are positive integers before any user/group operations.
|
|
# Non-numeric values would cause useradd/groupadd to fail with confusing errors.
|
|
if ! [[ "$PUID" =~ ^[0-9]+$ ]] || ! [[ "$PGID" =~ ^[0-9]+$ ]]; then
|
|
echo ""
|
|
echo "================================================================"
|
|
echo "ERROR: PUID and PGID must be positive integers."
|
|
echo " PUID=$PUID PGID=$PGID"
|
|
echo " Please set valid numeric values (default: 1000)."
|
|
echo "================================================================"
|
|
echo ""
|
|
exit 1
|
|
fi
|
|
|
|
# PostgreSQL refuses to run as root (UID 0). Block early — before any
|
|
# user/group manipulation — to prevent renaming the root user/group,
|
|
# which would break the container.
|
|
if [ "$PUID" = "0" ] || [ "$PGID" = "0" ]; then
|
|
echo ""
|
|
echo "================================================================"
|
|
echo "ERROR: PUID=0 or PGID=0 is not supported."
|
|
echo " PostgreSQL cannot run as root (UID 0)."
|
|
echo " Please set PUID and PGID to a non-zero value (default: 1000)."
|
|
echo "================================================================"
|
|
echo ""
|
|
exit 1
|
|
fi
|
|
|
|
# Check if group with PGID exists
|
|
if getent group "$PGID" >/dev/null 2>&1; then
|
|
# Group exists, check if it's named correctly (should match POSTGRES_USER)
|
|
existing_group=$(getent group "$PGID" | cut -d: -f1)
|
|
if [ "$existing_group" != "$POSTGRES_USER" ]; then
|
|
# Rename the existing group to match POSTGRES_USER
|
|
groupmod -n "$POSTGRES_USER" "$existing_group"
|
|
echo "Group $existing_group with GID $PGID renamed to $POSTGRES_USER"
|
|
fi
|
|
else
|
|
# Group doesn't exist, create it with same name as POSTGRES_USER
|
|
groupadd -g "$PGID" "$POSTGRES_USER"
|
|
echo "Group $POSTGRES_USER with GID $PGID created"
|
|
fi
|
|
|
|
# Create user if it doesn't exist
|
|
if ! getent passwd "$PUID" > /dev/null 2>&1; then
|
|
useradd -u "$PUID" -g "$PGID" -m "$POSTGRES_USER"
|
|
else
|
|
existing_user=$(getent passwd "$PUID" | cut -d: -f1)
|
|
if [ "$existing_user" != "$POSTGRES_USER" ]; then
|
|
usermod -l "$POSTGRES_USER" -g "$PGID" "$existing_user"
|
|
fi
|
|
fi
|
|
|
|
# Get the GID of /dev/dri/renderD128 on the host (must be mounted into container)
|
|
if [ -e "/dev/dri/renderD128" ]; then
|
|
HOST_RENDER_GID=$(stat -c '%g' /dev/dri/renderD128)
|
|
|
|
# Check if this GID belongs to the video group
|
|
VIDEO_GID=$(getent group video 2>/dev/null | cut -d: -f3)
|
|
|
|
if [ "$HOST_RENDER_GID" = "$VIDEO_GID" ]; then
|
|
echo "RenderD128 GID ($HOST_RENDER_GID) matches video group GID. Using video group for GPU access."
|
|
# Make sure POSTGRES_USER is in video group
|
|
if ! id -nG "$POSTGRES_USER" | grep -qw "video"; then
|
|
usermod -a -G video "$POSTGRES_USER"
|
|
echo "Added user $POSTGRES_USER to video group for GPU access"
|
|
fi
|
|
else
|
|
# We need to ensure render group exists with correct GID
|
|
if getent group render >/dev/null; then
|
|
CURRENT_RENDER_GID=$(getent group render | cut -d: -f3)
|
|
if [ "$CURRENT_RENDER_GID" != "$HOST_RENDER_GID" ]; then
|
|
# Check if another group already has the target GID
|
|
if getent group "$HOST_RENDER_GID" >/dev/null 2>&1; then
|
|
EXISTING_GROUP=$(getent group "$HOST_RENDER_GID" | cut -d: -f1)
|
|
echo "Warning: Cannot change render group GID to $HOST_RENDER_GID as it's already used by group '$EXISTING_GROUP'"
|
|
# Add user to the existing group with the target GID to ensure device access
|
|
if ! id -nG "$POSTGRES_USER" | grep -qw "$EXISTING_GROUP"; then
|
|
usermod -a -G "$EXISTING_GROUP" "$POSTGRES_USER" || echo "Warning: Failed to add user to $EXISTING_GROUP group"
|
|
echo "Added user $POSTGRES_USER to $EXISTING_GROUP group for GPU access"
|
|
fi
|
|
else
|
|
echo "Changing render group GID from $CURRENT_RENDER_GID to $HOST_RENDER_GID"
|
|
groupmod -g "$HOST_RENDER_GID" render || echo "Warning: Failed to change render group GID. Continuing anyway..."
|
|
fi
|
|
fi
|
|
else
|
|
echo "Creating render group with GID $HOST_RENDER_GID"
|
|
groupadd -g "$HOST_RENDER_GID" render
|
|
fi
|
|
|
|
# Make sure POSTGRES_USER is in render group
|
|
if ! id -nG "$POSTGRES_USER" | grep -qw "render"; then
|
|
usermod -a -G render "$POSTGRES_USER"
|
|
echo "Added user $POSTGRES_USER to render group for GPU access"
|
|
fi
|
|
fi
|
|
else
|
|
echo "Warning: /dev/dri/renderD128 not found. GPU acceleration may not be available."
|
|
fi
|
|
|
|
# Always add user to video group for hardware acceleration if it exists
|
|
# (some systems use video group for general GPU access)
|
|
if getent group video >/dev/null 2>&1; then
|
|
if ! id -nG "$POSTGRES_USER" | grep -qw "video"; then
|
|
usermod -a -G video "$POSTGRES_USER"
|
|
echo "Added user $POSTGRES_USER to video group for hardware acceleration access"
|
|
fi
|
|
fi
|
|
|
|
# Run nginx as specified user (replace any existing user directive on line 1)
|
|
sed -i "1s/^user .*/user $POSTGRES_USER;/" /etc/nginx/nginx.conf
|