mirror of
https://github.com/truenas/charts.git
synced 2026-04-13 16:39:48 +08:00
3e75be5fa8
* fix a bug in common in regards to sysctls * add netboot * switch to tftp container * perm -> owner * make small adjustment in permission common container * update questions * 2 tests * no double bump * update readme * update readmes * test app * umask * capability * update chmod and readmes * remove test app and update metadata * untouch * update readme * update questions * update strategy * Address review * update image
112 lines
3.5 KiB
Smarty
112 lines
3.5 KiB
Smarty
{{/* Returns an init container that fixes permissions */}}
|
|
{{/* Call this template:
|
|
{{ include "ix.v1.common.app.permissions" (dict "UID" 568 "GID" 568 "type" "init") }}
|
|
|
|
type (optional): init or install (default: install)
|
|
UID: UID to change permissions to
|
|
GID: GID to change permissions to
|
|
*/}}
|
|
{{- define "ix.v1.common.app.permissions" -}}
|
|
{{- $type := .type | default "install" -}}
|
|
{{- $containerName := .containerName | default "permissions" -}}
|
|
{{- $mode := .mode | default "always" -}}
|
|
{{- $chmod := .chmod | default "" -}}
|
|
{{- $UID := .UID -}}
|
|
{{- $GID := .GID -}}
|
|
|
|
{{- $modes := (list "always" "check") -}}
|
|
{{- if not (mustHas $mode $modes) -}}
|
|
{{- fail (printf "Permissions Container - [mode] must be one of [%s]" (join ", " $modes)) -}}
|
|
{{- end -}}
|
|
|
|
{{- if (kindIs "invalid" $type) -}}
|
|
{{- fail "Permissions Container - [type] cannot be empty" -}}
|
|
{{- end -}}
|
|
{{- if (kindIs "invalid" $containerName) -}}
|
|
{{- fail "Permissions Container - [containerName] cannot be empty" -}}
|
|
{{- end -}}
|
|
{{- if (kindIs "invalid" $GID) -}}
|
|
{{- fail "Permissions Container - [GID] cannot be empty" -}}
|
|
{{- end -}}
|
|
{{- if (kindIs "invalid" $UID) -}}
|
|
{{- fail "Permissions Container - [UID] cannot be empty" -}}
|
|
{{- end }}
|
|
|
|
{{ $containerName }}:
|
|
enabled: true
|
|
type: {{ $type }}
|
|
imageSelector: bashImage
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 512Mi
|
|
securityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
runAsNonRoot: false
|
|
readOnlyRootFilesystem: false
|
|
capabilities:
|
|
add:
|
|
- CHOWN
|
|
{{- if $chmod }}
|
|
- FOWNER
|
|
{{- end }}
|
|
command: bash
|
|
args:
|
|
- -c
|
|
- |
|
|
for dir in /mnt/directories/*; do
|
|
if [ ! -d "$dir" ]; then
|
|
echo "[$dir] is not a directory, skipping"
|
|
continue
|
|
fi
|
|
|
|
echo "Current Ownership and Permissions on ["$dir"]:"
|
|
echo "chown: $(stat -c "%u %g" "$dir")"
|
|
echo "chmod: $(stat -c "%a" "$dir")"
|
|
|
|
{{- if eq $mode "check" }} {{/* If mode is check, check parent dir */}}
|
|
if [ $(stat -c %u "$dir") -eq {{ $UID }} ] && [ $(stat -c %g "$dir") -eq {{ $GID }} ]; then
|
|
echo "Ownership is correct. Skipping..."
|
|
fix_owner="false"
|
|
else
|
|
echo "Ownership is incorrect. Fixing..."
|
|
fix_owner="true"
|
|
fi
|
|
|
|
{{- if $chmod }} {{/* Only if chmod value is given */}}
|
|
if [ $(stat -c %a "$dir") -eq {{ $chmod }} ]; then
|
|
echo "Permissions are correct. Skipping..."
|
|
fix_perms="false"
|
|
else
|
|
echo "Permissions are incorrect. Fixing..."
|
|
fix_perms="true"
|
|
fi
|
|
{{- end }}
|
|
|
|
{{- else if eq $mode "always" }} {{/* If mode is always, always fix perms */}}
|
|
fix_owner="true"
|
|
fix_perms="true"
|
|
{{- end }}
|
|
|
|
{{/* Apply changes */}}
|
|
if [ "$fix_owner" = "true" ]; then
|
|
echo "Changing ownership to {{ $UID }}:{{ $GID }} on: ["$dir"]"
|
|
chown -R {{ $UID }}:{{ $GID }} "$dir"
|
|
echo "Finished changing ownership"
|
|
echo "Ownership after changes:"
|
|
stat -c "%u %g" "$dir"
|
|
fi
|
|
|
|
{{- if $chmod }} {{/* Only if chmod value is given */}}
|
|
if [ "$fix_perms" = "true" ]; then
|
|
echo "Changing permissions to {{ $chmod }} on: ["$dir"]"
|
|
chmod -R {{ $chmod }} "$dir"
|
|
echo "Finished changing permissions"
|
|
echo "Permissions after changes:"
|
|
stat -c "%a" "$dir"
|
|
fi
|
|
{{- end }}
|
|
done
|
|
{{- end -}}
|