mirror of
https://github.com/netbootxyz/docker-netbootxyz.git
synced 2025-08-07 06:37:43 +02:00
ca7a3390c2
* Implement rootless Docker container with preserved TFTP logging - Convert all processes to run as non-root user (nbxyz) for enhanced security - Add customizable PUID/PGID environment variables for volume permission management - Implement privilege dropping using gosu for secure initialization - Optimize Dockerfile with multi-stage build and better caching - Create dnsmasq wrapper script to ensure TFTP logs appear in docker logs - Configure supervisord to properly forward dnsmasq output to container stdout - Maintain full TFTP/PXE boot debugging functionality for users Security improvements: - All application processes (nginx, webapp, dnsmasq) run as nbxyz user - Only supervisord initialization runs as root, then drops privileges - Proper permission management for all service directories - Configurable user/group IDs via PUID/PGID environment variables Performance optimizations: - Multi-stage Docker build reduces final image size - Better layer caching for faster rebuilds - Optimized package installation and cleanup 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> * Update Dockerfile Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update root/init.sh Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
22 lines
805 B
Bash
Executable File
22 lines
805 B
Bash
Executable File
#!/bin/bash
|
|
|
|
# Perform the initial configuration as root
|
|
/init.sh
|
|
|
|
echo " _ _ _ "
|
|
echo " _ __ ___| |_| |__ ___ ___ | |_ __ ___ _ ____ "
|
|
echo "| '_ \ / _ \ __| '_ \ / _ \ / _ \| __| \ \/ / | | |_ / "
|
|
echo "| | | | __/ |_| |_) | (_) | (_) | |_ _ > <| |_| |/ / "
|
|
echo "|_| |_|\___|\__|_.__/ \___/ \___/ \__(_)_/\_\\__, /___| "
|
|
echo " |___/ "
|
|
echo
|
|
echo "If you enjoy netboot.xyz projects, please support us at:"
|
|
echo
|
|
echo "https://opencollective.com/netbootxyz"
|
|
echo "https://github.com/sponsors/netbootxyz"
|
|
echo
|
|
|
|
# Run supervisord as root (it will use gosu for individual programs)
|
|
echo "[start] Starting supervisord (programs will run as nbxyz)"
|
|
exec supervisord -c /etc/supervisor.conf
|