groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-02-28 21:19:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Moved to a non-root model.

Browse source 
- Added buildargs to specify the User ID and Group IDs.
- entrypoint now defaults to running as 1000:1000 rather then 0:0.
This commit is contained in:
Vylyne 2026-02-17 10:15:50 -05:00
parent fa5fa7b788
commit 5135ffe4c6
1 changed files with 19 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

24
Dockerfile
View file

@ -1,5 +1,9 @@
# globally defining Arguments and Defaults
ARG NUSQLITE3_DIR="/usr/local/lib/nusqlite3" ARG NUSQLITE3_DIR="/usr/local/lib/nusqlite3"
ARG NUSQLITE3_PATH="${NUSQLITE3_DIR}/libnusqlite3.so" ARG NUSQLITE3_PATH="${NUSQLITE3_DIR}/libnusqlite3.so"
# default Process user id and group id
ARG PUID=1000
ARG PGID=1000
### STAGE 0: Build client ### ### STAGE 0: Build client ###
FROM node:20-alpine AS build-client FROM node:20-alpine AS build-client
@ -25,7 +29,7 @@ RUN apk add --no-cache --update \
unzip unzip
WORKDIR /server WORKDIR /server
COPY index.js package* /server COPY index.js package* /server/
COPY /server /server/server COPY /server /server/server
RUN case "$TARGETPLATFORM" in \ RUN case "$TARGETPLATFORM" in \
@ -45,19 +49,28 @@ FROM node:20-alpine
ARG NUSQLITE3_DIR ARG NUSQLITE3_DIR
ARG NUSQLITE3_PATH ARG NUSQLITE3_PATH
ARG PUID
ARG PGID
# Install only runtime dependencies # Install only runtime dependencies
RUN apk add --no-cache --update \ RUN apk add --no-cache --update \
tzdata \ tzdata \
ffmpeg \ ffmpeg \
tini tini \
shadow \
&& groupmod -g ${PGID} -n audiobookshelf node\
&& usermod -u ${PUID} -l audiobookshelf -d /home/audiobookshelf -m node \
&& apk del shadow \
&& mkdir -p /config /metadata \
&& chown -R audiobookshelf:audiobookshelf /config /metadata \
&& chmod a=rwx /config /metadata
WORKDIR /app WORKDIR /app
# Copy compiled frontend and server from build stages # Copy compiled frontend and server from build stages
COPY --from=build-client /client/dist /app/client/dist COPY --chmod=755 --from=build-client /client/dist /app/client/dist
COPY --from=build-server /server /app COPY --chmod=755 --from=build-server /server /app
COPY --from=build-server ${NUSQLITE3_PATH} ${NUSQLITE3_PATH} COPY --chmod=755 --from=build-server ${NUSQLITE3_PATH} ${NUSQLITE3_PATH}
EXPOSE 80 EXPOSE 80
@ -69,5 +82,6 @@ ENV SOURCE="docker"
ENV NUSQLITE3_DIR=${NUSQLITE3_DIR} ENV NUSQLITE3_DIR=${NUSQLITE3_DIR}
ENV NUSQLITE3_PATH=${NUSQLITE3_PATH} ENV NUSQLITE3_PATH=${NUSQLITE3_PATH}
USER audiobookshelf
ENTRYPOINT ["tini", "--"] ENTRYPOINT ["tini", "--"]
CMD ["node", "index.js"] CMD ["node", "index.js"]