ian/opencode-container
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: reduce permissions and fix npm and opencode versions

Browse Source
This commit is contained in:
Ian
2026-10-01 23:22:33 +02:00
parent c64bbe5336
commit 7b98d6dae6
4 changed files with 33 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
entrypoint.sh
+23 -23
View File
@@ -1,29 +1,29 @@
#!/bin/bash
set -euo pipefail
CERT_DIR="${CERT_DIR:-/host-certs}"
if [[ -d "$CERT_DIR" ]]; then
shopt -s nullglob
certs=("$CERT_DIR"/*.crt "$CERT_DIR"/*.pem)
if ((${#certs[@]})); then
mkdir -p /usr/local/share/ca-certificates/opencode-host
for cert in "${certs[@]}"; do
target="/usr/local/share/ca-certificates/opencode-host/$(basename "${cert%.*}").crt"
if openssl x509 -in "$cert" -noout >/dev/null 2>&1; then
cp -f "$cert" "$target"
else
echo "WARNING: ignoring invalid CA certificate: $cert" >&2
fi
done
if update-ca-certificates >/tmp/opencode-ca.log 2>&1; then
:
else
echo "WARNING: update-ca-certificates failed; continuing." >&2
cat /tmp/opencode-ca.log >&2 || true
fi
fi
fi
# CERT_DIR="${CERT_DIR:-/host-certs}"
#
# if [[ -d "$CERT_DIR" ]]; then
# shopt -s nullglob
# certs=("$CERT_DIR"/*.crt "$CERT_DIR"/*.pem)
# if ((${#certs[@]})); then
# mkdir -p /usr/local/share/ca-certificates/opencode-host
# for cert in "${certs[@]}"; do
# target="/usr/local/share/ca-certificates/opencode-host/$(basename "${cert%.*}").crt"
# if openssl x509 -in "$cert" -noout >/dev/null 2>&1; then
# cp -f "$cert" "$target"
# else
# echo "WARNING: ignoring invalid CA certificate: $cert" >&2
# fi
# done
# if update-ca-certificates >/tmp/opencode-ca.log 2>&1; then
# :
# else
# echo "WARNING: update-ca-certificates failed; continuing." >&2
# cat /tmp/opencode-ca.log >&2 || true
# fi
# fi
# fi
host_lang="${HOST_LANG:-${LANG:-C.UTF-8}}"
host_lc_all="${HOST_LC_ALL:-${LC_ALL:-}}"