diff --git a/.infra/kube/deployment.yaml b/.infra/kube/deployment.yaml index d0be4dd..36cdf08 100644 --- a/.infra/kube/deployment.yaml +++ b/.infra/kube/deployment.yaml @@ -24,6 +24,8 @@ spec: memory: "1Gi" ports: - containerPort: 8080 + securityContext: + runAsUser: 1000 volumeMounts: - name: tusd-disk mountPath: /srv/tusd-data diff --git a/Dockerfile b/Dockerfile index 7b7b12d..b992ccd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -20,7 +20,8 @@ RUN addgroup -g 1000 tusd \ && rm -r /go/src/* \ && apk del git +COPY entrypoint.sh /srv/entrypoint.sh WORKDIR /srv/tusd-data EXPOSE 1080 USER tusd -ENTRYPOINT ["/go/bin/tusd","-dir","/srv/tusd-data","--hooks-dir","/srv/tusd-hooks"] +ENTRYPOINT ["/srv/entrypoint.sh"] diff --git a/entrypoint.sh b/entrypoint.sh new file mode 100755 index 0000000..a7cb06f --- /dev/null +++ b/entrypoint.sh @@ -0,0 +1,5 @@ +#!/bin/sh + +chown tusd:tusd /srv/tusd-data +chown tusd:tusd /srv/tusd-hooks +/go/bin/tusd -dir /srv/tusd-dat --hooks-dir /srv/tusd-hooks \ No newline at end of file