admin/TaskPool
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: improve dev container permissions and caches

Browse Source
This commit is contained in:
jbwfu
2026-03-03 16:56:08 +08:00
parent 183f3ab71e
commit cd49af06dc
4 changed files with 71 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/docker-entrypoint-dev.sh
+56 -12
View File
@@ -10,30 +10,74 @@ log() {
printf "${COLOR_PREFIX} %s\n" "$1"
}
ensure_cache_ownership() {
local dir="$1"
local target_uid="$2"
local target_gid="$3"
if [ ! -d "$dir" ]; then
mkdir -p "$dir"
chown "$target_uid:$target_gid" "$dir"
return
fi
local current_uid=$(stat -c '%u' "$dir")
local dirty_file=$(find "$dir" -mindepth 1 ! -uid "$target_uid" -print -quit 2>/dev/null)
if [ "$current_uid" == "$target_uid" ] && [ -z "$dirty_file" ]; then
log "Cache hit: $dir owned by $target_uid. Reusing."
else
if [ -n "$dirty_file" ]; then
log "Dirty cache detected in $dir (Found root-owned files like $dirty_file)."
else
log "User changed ($current_uid -> $target_uid). Resetting cache in $dir..."
fi
log "Nuking directory to ensure clean state..."
find "$dir" -mindepth 1 -delete 2>/dev/null || rm -rf "$dir"/*
chown "$target_uid:$target_gid" "$dir"
log "Cache reset complete. Ownership transferred to $target_uid."
fi
}
log "Initializing Development Environment..."
DEV_UID=${DEV_UID:-1000}
DEV_GID=${DEV_GID:-1000}
if ! id -u devuser >/dev/null 2>&1; then
log "Creating user 'devuser' (UID: $DEV_UID, GID: $DEV_GID)..."
groupadd -o -g "$DEV_GID" devgroup
useradd -o -u "$DEV_UID" -g "$DEV_GID" -m -s /bin/bash devuser
EXISTING_USER=$(getent passwd "$DEV_UID" | cut -d: -f1 | head -n 1)
echo "devuser ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/devuser
chmod 0440 /etc/sudoers.d/devuser
if [ -n "$EXISTING_USER" ]; then
TARGET_USER="$EXISTING_USER"
log "UID $DEV_UID already exists as user '$TARGET_USER'. Using existing user."
else
TARGET_USER="devuser"
log "Creating user '$TARGET_USER' (UID: $DEV_UID, GID: $DEV_GID)..."
groupadd -o -g "$DEV_GID" devgroup
useradd -o -u "$DEV_UID" -g "$DEV_GID" -m -s /bin/bash "$TARGET_USER"
fi
chown devuser:devgroup /app/envs /app/web/node_modules /go/pkg/mod 2>/dev/null || true
if [ "$TARGET_USER" != "root" ]; then
echo "$TARGET_USER ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/$TARGET_USER
chmod 0440 /etc/sudoers.d/$TARGET_USER
fi
export npm_config_cache=/var/cache/npm
mkdir -p /var/cache/npm /app/web/node_modules
chown "$DEV_UID:$DEV_GID" /var/cache/npm /app/web/node_modules
if [ "$DEV_UID" != "0" ]; then
ensure_cache_ownership "/app/envs" "$DEV_UID" "$DEV_GID"
ensure_cache_ownership "/app/web/node_modules" "$DEV_UID" "$DEV_GID"
ensure_cache_ownership "/var/cache/npm" "$DEV_UID" "$DEV_GID"
ensure_cache_ownership "/go" "$DEV_UID" "$DEV_GID"
fi
MISE_DIR="/app/envs/mise"
mkdir -p "$MISE_DIR"
log "Syncing mise environment from base..."
rsync -a --ignore-existing /opt/mise-dev/ "$MISE_DIR" || true
rsync -a --chown="$DEV_UID:$DEV_GID" --ignore-existing /opt/mise-dev/ "$MISE_DIR" || true
log "Mise environment synced"
chown -R ${DEV_UID}:${DEV_GID} /opt/mise-dev /go /root/.npm /app
export MISE_DATA_DIR="$MISE_DIR"
export MISE_CONFIG_DIR="$MISE_DIR"
export PATH="$MISE_DIR/shims:$MISE_DIR/bin:$PATH"
@@ -45,5 +89,5 @@ log "python: $(python --version 2>&1 | head -n 1) at $(which python)"
log "node: $(node --version 2>&1 | head -n 1) at $(which node)"
log "npm: $(npm --version 2>&1 | head -n 1) at $(which npm)"
log "Environment ready! Starting make dev..."
exec gosu devuser "$@"
log "Environment ready! Starting command as user '$TARGET_USER' (UID: $DEV_UID)..."
exec gosu "$DEV_UID:$DEV_GID" "$@"