mirror of
https://github.com/luzifer-docker/teamspeak3.git
synced 2024-11-09 12:30:01 +00:00
Run as unprivileged user (#20)
Squashed commit of the following: commit6a7884c1fb
Author: Thor77 <thor77@thor77.org> Date: Sat Mar 25 16:07:05 2023 +0100 Run as unprivileged user commit0bef82b1e9
Author: Thor77 <thor77@thor77.org> Date: Sat Mar 25 16:06:29 2023 +0100 Add dumb-init entrypoint to allow for clean shutdown commit92b5d44110
Author: Thor77 <thor77@thor77.org> Date: Sat Mar 25 16:05:18 2023 +0100 Update base image to debian bullseye closes #20 Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
parent
ec19c9e945
commit
d96da5143a
1 changed files with 9 additions and 5 deletions
14
Dockerfile
14
Dockerfile
|
@ -1,4 +1,4 @@
|
||||||
FROM debian:stretch
|
FROM debian:bullseye
|
||||||
|
|
||||||
LABEL maintainer Knut Ahlers <knut@ahlers.me>
|
LABEL maintainer Knut Ahlers <knut@ahlers.me>
|
||||||
|
|
||||||
|
@ -6,23 +6,27 @@ LABEL maintainer Knut Ahlers <knut@ahlers.me>
|
||||||
ENV TEAMSPEAK_VERSION=3.13.7 \
|
ENV TEAMSPEAK_VERSION=3.13.7 \
|
||||||
TEAMSPEAK_SHA256=775a5731a9809801e4c8f9066cd9bc562a1b368553139c1249f2a0740d50041e
|
TEAMSPEAK_SHA256=775a5731a9809801e4c8f9066cd9bc562a1b368553139c1249f2a0740d50041e
|
||||||
|
|
||||||
SHELL ["/bin/bash", "-exo", "pipefail", "-c"]
|
|
||||||
RUN apt-get update \
|
RUN apt-get update \
|
||||||
&& apt-get install -y curl bzip2 ca-certificates --no-install-recommends \
|
&& apt-get install -y curl bzip2 ca-certificates dumb-init --no-install-recommends \
|
||||||
&& curl -sSfLo teamspeak3-server_linux-amd64.tar.bz2 \
|
&& curl -sSfLo teamspeak3-server_linux-amd64.tar.bz2 \
|
||||||
"https://files.teamspeak-services.com/releases/server/${TEAMSPEAK_VERSION}/teamspeak3-server_linux_amd64-${TEAMSPEAK_VERSION}.tar.bz2" \
|
"https://files.teamspeak-services.com/releases/server/${TEAMSPEAK_VERSION}/teamspeak3-server_linux_amd64-${TEAMSPEAK_VERSION}.tar.bz2" \
|
||||||
&& echo "${TEAMSPEAK_SHA256} *teamspeak3-server_linux-amd64.tar.bz2" | sha256sum -c - \
|
&& echo "${TEAMSPEAK_SHA256} *teamspeak3-server_linux-amd64.tar.bz2" | sha256sum -c - \
|
||||||
&& tar -C /opt -xjf teamspeak3-server_linux-amd64.tar.bz2 \
|
&& tar -C /opt -xjf teamspeak3-server_linux-amd64.tar.bz2 \
|
||||||
&& rm teamspeak3-server_linux-amd64.tar.bz2 \
|
&& rm teamspeak3-server_linux-amd64.tar.bz2 \
|
||||||
&& apt-get purge -y curl bzip2 && apt-get autoremove -y \
|
&& apt-get purge -y curl bzip2 && apt-get autoremove -y \
|
||||||
&& apt-get clean \
|
&& apt-get clean \
|
||||||
&& rm -rf /var/lib/apt/lists/*
|
&& rm -rf /var/lib/apt/lists/* \
|
||||||
|
&& groupadd -g 1000 teamspeak \
|
||||||
|
&& useradd -u 1000 -g 1000 teamspeak \
|
||||||
|
&& chown -R teamspeak:teamspeak /opt/teamspeak3-server_linux_amd64
|
||||||
|
|
||||||
COPY docker-ts3.sh /opt/docker-ts3.sh
|
COPY docker-ts3.sh /opt/docker-ts3.sh
|
||||||
|
|
||||||
# Inject a Volume for any TS3-Data that needs to be persisted or to be accessible from the host. (e.g. for Backups)
|
# Inject a Volume for any TS3-Data that needs to be persisted or to be accessible from the host. (e.g. for Backups)
|
||||||
VOLUME ["/teamspeak3"]
|
VOLUME ["/teamspeak3"]
|
||||||
|
|
||||||
|
USER teamspeak
|
||||||
|
ENTRYPOINT ["/usr/bin/dumb-init", "--"]
|
||||||
CMD ["/opt/docker-ts3.sh"]
|
CMD ["/opt/docker-ts3.sh"]
|
||||||
|
|
||||||
# Expose the Standard TS3 port, for files, for serverquery
|
# Expose the Standard TS3 port, for files, for serverquery
|
||||||
|
|
Loading…
Reference in a new issue