Compare commits

...

10 Commits

Author SHA1 Message Date
LinuxServer-CI
bdf6dff22a Bot Updating Package Versions 2024-10-26 20:20:58 +00:00
LinuxServer-CI
b0a6736fa3 Bot Updating Package Versions 2024-10-16 02:15:48 +00:00
aptalca
0ee7309dc4 Merge pull request #188 from linuxserver/chown
only chown when ownership change or new install detected
2024-10-15 22:12:30 -04:00
aptalca
fcf9fcbb7f only chown when ownership change or new install detected 2024-10-13 13:32:44 -04:00
aptalca
42aae8bde4 use lsiown, ignore dev/cache folders 2024-10-13 12:17:41 -04:00
LinuxServer-CI
b0f61803a2 Bot Updating Templated Files 2024-10-10 16:22:07 +00:00
Adam
1f80e77050 Merge pull request #185 from markagonzales/ssh-perm-changes 2024-10-10 17:20:41 +01:00
Mark Gonzales
e257643459 updates changelog date 2024-10-10 10:41:07 -05:00
Mark Gonzales
c0aa0f7fc4 update readme-vars.yml 2024-09-01 10:42:53 -05:00
Mark Gonzales
7579ec248a changes perms in .ssh to file type 2024-08-31 21:50:18 -05:00
4 changed files with 26 additions and 15 deletions

View File

@@ -141,7 +141,7 @@ Containers are configured using parameters passed at runtime (such as those abov
| `-e HASHED_PASSWORD=` | Optional web gui password, overrides `PASSWORD`, instructions on how to create it is below. |
| `-e SUDO_PASSWORD=password` | If this optional variable is set, user will have sudo access in the code-server terminal with the specified password. |
| `-e SUDO_PASSWORD_HASH=` | Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`. |
| `-e PROXY_DOMAIN=code-server.my.domain` | If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/cdr/code-server/blob/master/docs/FAQ.md#sub-domains) |
| `-e PROXY_DOMAIN=code-server.my.domain` | If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/coder/code-server/blob/main/docs/guide.md#using-a-subdomain) |
| `-e DEFAULT_WORKSPACE=/config/workspace` | If this optional variable is set, code-server will open this directory by default |
| `-v /config` | Contains all relevant configuration files. |
@@ -307,6 +307,8 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
## Versions
* **13.10.24:** - Only chown config folder when change to ownership or new install is detected.
* **09.10.24:** - Manage permissions in /config/.ssh according to file type
* **19.08.24:** - Rebase to Ubuntu Noble.
* **01.07.23:** - Deprecate armhf. As announced [here](https://www.linuxserver.io/blog/a-farewell-to-arm-hf)
* **05.10.22:** - Install recommended deps to maintain parity with the older images.

View File

@@ -159,7 +159,7 @@ fsharp 1.0.0 npm
function-bind 1.1.1 npm (+1 duplicate)
function-bind 1.1.2 npm
gauge 3.0.2 npm
gcc-14-base 14-20240412-0ubuntu1 deb
gcc-14-base 14.2.0-4ubuntu2~24.04 deb
get-intrinsic 1.2.1 npm
get-intrinsic 1.2.4 npm (+2 duplicates)
get-uri 6.0.1 npm
@@ -253,7 +253,7 @@ libacl1 2.3.2-1build1 deb
libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.3 deb
libapt-pkg6.0t64 2.7.14build2 deb
libassuan0 2.5.6-1build1 deb
libatomic1 14-20240412-0ubuntu1 deb
libatomic1 14.2.0-4ubuntu2~24.04 deb
libattr1 1:2.5.2-1build1 deb
libaudit-common 1:3.1.2-2.1build1 deb
libaudit1 1:3.1.2-2.1build1 deb
@@ -278,7 +278,7 @@ libexpat1 2.6.1-2ubuntu0.1 deb
libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 deb
libffi8 3.4.6-1build1 deb
libfido2-1 1.14.0-1build3 deb
libgcc-s1 14-20240412-0ubuntu1 deb
libgcc-s1 14.2.0-4ubuntu2~24.04 deb
libgcrypt20 1.10.3-2build1 deb
libgdbm-compat4t64 1.23-5.1build1 deb
libgdbm6t64 1.23-5.1build1 deb
@@ -312,7 +312,7 @@ libpam-runtime 1.5.3-5ubuntu5.1 deb
libpam0g 1.5.3-5ubuntu5.1 deb
libpcre2-8-0 10.42-4ubuntu2 deb
libperl5.38t64 5.38.2-3.2build2 deb
libproc2-0 2:4.0.4-4ubuntu3.1 deb
libproc2-0 2:4.0.4-4ubuntu3.2 deb
libpsl5t64 0.21.2-1.1build1 deb
libreadline8t64 8.2-4build1 deb
librtmp1 2.4+20151223.gitfa8646d.1-2build7 deb
@@ -329,7 +329,7 @@ libsqlite3-0 3.45.1-1ubuntu2 deb
libss2 1.47.0-2.4~exp1ubuntu4.1 deb
libssh-4 0.10.6-2build2 deb
libssl3t64 3.0.13-0ubuntu3.4 deb
libstdc++6 14-20240412-0ubuntu1 deb
libstdc++6 14.2.0-4ubuntu2~24.04 deb
libsystemd0 255.4-1ubuntu8.4 deb
libtasn1-6 4.19.0-3build1 deb
libtinfo6 6.4+20240113-1ubuntu2 deb
@@ -348,7 +348,7 @@ libzstd1 1.5.5+dfsg2-2build1.1 deb
limiter 2.1.0 npm
locales 2.39-0ubuntu8.3 deb
log 1.0.0 npm
login 1:4.13+dfsg1-4ubuntu3 deb
login 1:4.13+dfsg1-4ubuntu3.2 deb
logsave 1.47.0-2.4~exp1ubuntu4.1 deb
lru-cache 6.0.0 npm (+1 duplicate)
lru-cache 7.18.3 npm
@@ -381,7 +381,7 @@ mount 2.39.3-9ubuntu6.1 deb
ms 2.0.0 npm (+1 duplicate)
ms 2.1.2 npm (+1 duplicate)
ms 2.1.3 npm
nano 7.2-2build1 deb
nano 7.2-2ubuntu0.1 deb
napi-build-utils 1.0.2 npm
native-watchdog 1.4.2 npm
ncurses-base 6.4+20240113-1ubuntu2 deb
@@ -416,7 +416,7 @@ os-tmpdir 1.0.2 npm
pac-proxy-agent 7.0.1 npm
pac-resolver 7.0.0 npm
parseurl 1.3.3 npm
passwd 1:4.13+dfsg1-4ubuntu3 deb
passwd 1:4.13+dfsg1-4ubuntu3.2 deb
patch 2.7.6-7build3 deb
path-is-absolute 1.0.1 npm
path-to-regexp 3.2.0 npm
@@ -432,7 +432,7 @@ picomatch 2.3.1 npm
pinentry-curses 1.2.1-3ubuntu5 deb
powershell 1.0.0 npm
prebuild-install 7.1.2 npm
procps 2:4.0.4-4ubuntu3.1 deb
procps 2:4.0.4-4ubuntu3.2 deb
proxy-addr 2.0.7 npm
proxy-agent 6.4.0 npm
proxy-from-env 1.1.0 npm (+1 duplicate)

View File

@@ -27,7 +27,7 @@ opt_param_env_vars:
- {env_var: "HASHED_PASSWORD", env_value: "", desc: "Optional web gui password, overrides `PASSWORD`, instructions on how to create it is below."}
- {env_var: "SUDO_PASSWORD", env_value: "password", desc: "If this optional variable is set, user will have sudo access in the code-server terminal with the specified password."}
- {env_var: "SUDO_PASSWORD_HASH", env_value: "", desc: "Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`."}
- {env_var: "PROXY_DOMAIN", env_value: "code-server.my.domain", desc: "If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/cdr/code-server/blob/master/docs/FAQ.md#sub-domains)"}
- {env_var: "PROXY_DOMAIN", env_value: "code-server.my.domain", desc: "If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/coder/code-server/blob/main/docs/guide.md#using-a-subdomain)"}
- {env_var: "DEFAULT_WORKSPACE", env_value: "/config/workspace", desc: "If this optional variable is set, code-server will open this directory by default"}
# application setup block
@@ -47,6 +47,8 @@ app_setup_block: |
How to create the [hashed password](https://github.com/cdr/code-server/blob/master/docs/FAQ.md#can-i-store-my-password-hashed).
# changelog
changelogs:
- {date: "13.10.24:", desc: "Only chown config folder when change to ownership or new install is detected."}
- {date: "09.10.24:", desc: "Manage permissions in /config/.ssh according to file type"}
- {date: "19.08.24:", desc: "Rebase to Ubuntu Noble."}
- {date: "01.07.23:", desc: "Deprecate armhf. As announced [here](https://www.linuxserver.io/blog/a-farewell-to-arm-hf)"}
- {date: "05.10.22:", desc: "Install recommended deps to maintain parity with the older images."}

View File

@@ -26,10 +26,17 @@ if [[ ! -f /config/.profile ]]; then
cp /root/.profile /config/.profile
fi
# fix permissions (ignore contents of /config/workspace)
find /config -path /config/workspace -prune -o -exec chown abc:abc {} +
chown abc:abc /config/workspace
# fix permissions (ignore contents of workspace)
PUID=${PUID:-911}
if [[ ! "$(stat -c %u /config/.profile)" == "${PUID}" ]]; then
echo "Change in ownership or new install detected, please be patient while we chown existing files"
echo "This could take some time"
find /config -path "/config/workspace" -prune -o -exec lsiown abc:abc {} +
lsiown abc:abc /config/workspace
fi
chmod 700 /config/.ssh
if [[ -n "$(ls -A /config/.ssh)" ]]; then
chmod 600 /config/.ssh/*
find /config/.ssh/ -type d -exec chmod 700 '{}' \;
find /config/.ssh/ -type f -exec chmod 600 '{}' \;
find /config/.ssh/ -type f -iname '*.pub' -exec chmod 644 '{}' \;
fi