Skip to content

Instantly share code, notes, and snippets.

@kusold

kusold/entrypoint.sh

Created April 29, 2025 03:54
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save kusold/27c19bebf2dcf7a8edd1e1264d74789b to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save kusold/27c19bebf2dcf7a8edd1e1264d74789b to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. kusold created this gist Apr 29, 2025.
    54 changes: 54 additions & 0 deletions entrypoint.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,54 @@
    #!/bin/sh

    set -x
    set -e

    [ -z "${SIGNAL_CLI_CONFIG_DIR}" ] && echo "SIGNAL_CLI_CONFIG_DIR environmental variable needs to be set! Aborting!" && exit 1;

    # Container is running as root
    if [ "$(id -u)" = "0" ]; then
    usermod -u ${SIGNAL_CLI_UID} signal-api
    groupmod -o -g ${SIGNAL_CLI_GID} signal-api

    # Fix permissions to ensure backward compatibility
    chown ${SIGNAL_CLI_UID}:${SIGNAL_CLI_GID} -R ${SIGNAL_CLI_CONFIG_DIR}
    #
    # Show warning on docker exec
    cat <<EOF >> /root/.bashrc
    echo "WARNING: signal-cli-rest-api runs as signal-api (not as root!)"
    echo "Run 'su signal-api' before using signal-cli!"
    echo "If you want to use signal-cli directly, don't forget to specify the config directory. e.g: \"signal-cli --config ${SIGNAL_CLI_CONFIG_DIR}\""
    EOF
    fi



    cap_prefix="-cap_"
    caps="$cap_prefix$(seq -s ",$cap_prefix" 0 $(cat /proc/sys/kernel/cap_last_cap))"

    # TODO: check mode
    if [ "$MODE" = "json-rpc" ]
    then
    /usr/bin/jsonrpc2-helper
    if [ -n "$JAVA_OPTS" ] ; then
    echo "export JAVA_OPTS='$JAVA_OPTS'" >> /etc/default/supervisor
    fi
    if [ ! "$(id -u)" = "0" ]; then
    echo "Creating alternate log location"
    mkdir -p /logs
    sed -i 's;/var/log/;/log/;g' /etc/supervisor/conf.d/signal-cli-json-rpc-1.conf
    fi
    service supervisor start
    supervisorctl start all
    fi

    export HOST_IP=$(hostname -I | awk '{print $1}')

    # Start API as signal-api user
    if [ "$(id -u)" = "0" ]; then
    exec setpriv --reuid=${SIGNAL_CLI_UID} --regid=${SIGNAL_CLI_GID} --init-groups --inh-caps=$caps signal-cli-rest-api -signal-cli-config=${SIGNAL_CLI_CONFIG_DIR}
    else
    echo "Running in Rootless Mode"
    # Exec is required otherwise signal-cli-rest-api doesn't listen for SIGTERM
    exec signal-cli-rest-api -signal-cli-config=${SIGNAL_CLI_CONFIG_DIR}
    fi