mirror of
https://github.com/netbootxyz/docker-netbootxyz.git
synced 2025-08-07 06:37:43 +02:00
The nginx service was failing to start due to permission denied errors when trying to access /var/lib/nginx/logs/error.log. This directory is a symlink to /var/log/nginx which was owned by the nginx user instead of the nbxyz user that runs the service. Added proper ownership setup for /var/log/nginx directory to ensure nginx can write logs when running as the nbxyz user.
105 lines
3.6 KiB
Bash
Executable File
105 lines
3.6 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Configure user and group IDs
|
|
PUID=${PUID:-1000}
|
|
PGID=${PGID:-1000}
|
|
|
|
echo "[init] Setting up user nbxyz with PUID=${PUID} and PGID=${PGID}"
|
|
|
|
# Create group with specified GID if it doesn't exist
|
|
if ! getent group ${PGID} > /dev/null 2>&1; then
|
|
groupadd -g ${PGID} nbxyz
|
|
else
|
|
echo "[init] Group with GID ${PGID} already exists"
|
|
fi
|
|
|
|
# Create user with specified UID if it doesn't exist
|
|
if ! getent passwd ${PUID} > /dev/null 2>&1; then
|
|
useradd -u ${PUID} -g ${PGID} -d /config -s /bin/false nbxyz
|
|
else
|
|
echo "[init] User with UID ${PUID} already exists"
|
|
fi
|
|
|
|
# Add to users group for compatibility
|
|
usermod -a -G users nbxyz 2>/dev/null || true
|
|
|
|
# make our folders
|
|
mkdir -p \
|
|
/assets \
|
|
/config/nginx/site-confs \
|
|
/config/log/nginx \
|
|
/run \
|
|
/var/lib/nginx/logs \
|
|
/var/lib/nginx/tmp/client_body \
|
|
/var/tmp/nginx \
|
|
/var/log
|
|
|
|
# copy config files
|
|
[[ ! -f /config/nginx/nginx.conf ]] && \
|
|
cp /defaults/nginx.conf /config/nginx/nginx.conf
|
|
[[ ! -f /config/nginx/site-confs/default ]] && \
|
|
envsubst '${NGINX_PORT}' < /defaults/default > /config/nginx/site-confs/default
|
|
|
|
# Set up permissions for all directories that services need to write to
|
|
chown -R nbxyz:nbxyz /assets
|
|
chown -R nbxyz:nbxyz /var/lib/nginx
|
|
chown -R nbxyz:nbxyz /config/log/nginx
|
|
chown -R nbxyz:nbxyz /run
|
|
chown -R nbxyz:nbxyz /var/tmp/nginx
|
|
chown -R nbxyz:nbxyz /var/log/nginx
|
|
|
|
# create local logs dir
|
|
mkdir -p \
|
|
/config/menus/remote \
|
|
/config/menus/local
|
|
|
|
# download menus if not found
|
|
if [[ ! -f /config/menus/remote/menu.ipxe ]]; then
|
|
if [[ -z ${MENU_VERSION+x} ]]; then
|
|
MENU_VERSION=$(curl -sL "https://api.github.com/repos/netbootxyz/netboot.xyz/releases/latest" | jq -r '.tag_name')
|
|
fi
|
|
echo "[netbootxyz-init] Downloading netboot.xyz at ${MENU_VERSION}"
|
|
# menu files
|
|
curl -o \
|
|
/config/endpoints.yml -sL \
|
|
"https://raw.githubusercontent.com/netbootxyz/netboot.xyz/${MENU_VERSION}/endpoints.yml"
|
|
curl -o \
|
|
/tmp/menus.tar.gz -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/menus.tar.gz"
|
|
tar xf \
|
|
/tmp/menus.tar.gz -C \
|
|
/config/menus/remote
|
|
# boot files
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz.kpxe -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz.kpxe"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz-undionly.kpxe -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz-undionly.kpxe"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz.efi -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz.efi"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz-snp.efi -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz-snp.efi"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz-snponly.efi -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz-snponly.efi"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz-arm64.efi -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz-arm64.efi"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz-arm64-snp.efi -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz-arm64-snp.efi"
|
|
curl -o \
|
|
/config/menus/remote/netboot.xyz-arm64-snponly.efi -sL \
|
|
"https://github.com/netbootxyz/netboot.xyz/releases/download/${MENU_VERSION}/netboot.xyz-arm64-snponly.efi"
|
|
# layer and cleanup
|
|
echo -n "${MENU_VERSION}" > /config/menuversion.txt
|
|
cp -r /config/menus/remote/* /config/menus
|
|
rm -f /tmp/menus.tar.gz
|
|
fi
|
|
|
|
# Ownership
|
|
chown -R nbxyz:nbxyz /config
|