Use runuser to drop privileges and execute the app as the routewatch user (uid 1000). Fix data directory permissions at runtime since host mounts may have incorrect ownership.
8 lines
145 B
Bash
8 lines
145 B
Bash
#!/bin/bash
|
|
|
|
cd /var/lib/berlin.sneak.app.routewatch
|
|
chown -R routewatch:routewatch .
|
|
chmod 700 .
|
|
|
|
exec runuser -u routewatch -- /app/routewatch
|