feat: Prevent cron docker entrypoint to run as non-root user

roadiz · Sep 19, 2024 · 2dc6c62 · 2dc6c62
1 parent b927159
commit 2dc6c62
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/docker/php-fpm-alpine/docker-cron-entrypoint b/docker/php-fpm-alpine/docker-cron-entrypoint
@@ -3,6 +3,12 @@ set -e
 
 env >> /etc/environment
 
+# cron entrypoint must be run as root as it spawns crontab for each system user
+if [ "$(id -u)" -ne 0 ]; then
+    echo "Please run as root"
+    exit 1
+fi
+
 # Print env infos
 echo "APP_ENV=${APP_ENV}";
 echo "APP_RUNTIME_ENV=${APP_RUNTIME_ENV}";

diff --git a/docker/php-fpm-alpine/docker-cron-entrypoint-dev b/docker/php-fpm-alpine/docker-cron-entrypoint-dev
@@ -3,6 +3,12 @@ set -e
 
 env >> /etc/environment
 
+# cron entrypoint must be run as root as it spawns crontab for each system user
+if [ "$(id -u)" -ne 0 ]; then
+    echo "Please run as root"
+    exit 1
+fi
+
 # Print env infos
 echo "APP_ENV=${APP_ENV}";
 echo "APP_RUNTIME_ENV=${APP_RUNTIME_ENV}";